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ABSTRACT 


The  problem  with  current  international  disaster  relief  is  ineffective 
communication,  coordination,  cooperation,  and  collaboration  (4C).  Ineffective 
international  4C  allows  chaos  and  anarchy  to  significantly  hinder  disaster-relief 
efforts. 

After  action  reports  (AARs)  and  disaster  relief  (DR)  materials  were 
examined  to  identify  system-level  issues  during  DR  missions.  These  issues  were 
examined  to  determine  if  DR  exhibits  characteristics  of  a  wicked  problem. 

The  results  of  systems-thinking  analysis  show  that  anarchy,  social 
complexity,  and  stress  within  the  DR  system  have  a  negative  impact  on  all 
components  of  the  system.  To  improve  the  effectiveness  of  DR  missions  and 
help  mission  teams  to  present  a  unified  front  for  DR,  anarchy,  social  complexity, 
and  stress  must  be  reduced. 

This  work  proposes  a  communication  strategy  for  DR  missions  that 
harnesses  capabilities  of  information  communication  and  technology  (ICT) 
solutions,  introduces  a  cloud-based  hierarchical  trust  model,  and  outlines  a 
common  integration  interface.  The  strategy  encourages  open  and  transparent  4C 
between  DR  mission  teams  and  the  international  DR  community.  Properly 
implemented,  this  communication  strategy  could  reduce  system-level  anarchy 
and  social  complexity,  resulting  in  reduced  post-disaster  damage,  injuries,  and 
loss  of  life. 


V 


THIS  PAGE  INTENTIONALLY  LEFT  BLANK 


VI 


TABLE  OF  CONTENTS 


I.  THESIS  OVERVIEW . 1 

A.  INTRODUCTION . 1 

B.  PROBLEM  STATEMENT . 2 

C.  STRUCTURE  AND  SCOPE . 7 

D.  BENEFITS  OF  THE  THESIS . 9 

II.  BACKGROUND . 11 

A.  PREVIOUS  AND  CURRENT  SOLUTIONS . 11 

1.  Organization  Soiutions . 11 

2.  Coiiaborative  Soiutions . 14 

3.  Information  and  Communications  Technoiogy  Soiutions  .  15 

B.  HASTILY  FORMED  NETWORKS  DEPLOYMENT  REVIEW . 17 

1.  Southeast  Asia  Tsunami  Depioyment . 17 

2.  Hurricane  Katrina  Depioyment . 21 

3.  Haiti  Earthquake  Depioyment . 25 

4.  Typhoon  Haiyan  Depioyment . 29 

C.  SOLUTIONS  SUMMARY . 33 

III.  WICKED  PROBLEMS  AND  SYSTEMS  THINKING . 35 

A.  DISASTER  RELIEF  AS  A  WICKED  PROBLEM . 35 

1.  “You  Don’t  Understand  a  Problem  Until  You  Have  a 

Solution” . 36 

2.  “Wicked  Problems  Have  No  Stopping  Rule” . 38 

3.  “Solutions  to  Wicked  Problems  Are  Not  Right  or  Wrong”.  38 

4.  “Every  Wicked  Problem  is  Essentially  Unique  and 

Novel” . 39 

5.  “Every  Solution  to  a  Wicked  Problem  is  a  One-Shot 

Operation” . 39 

6.  “Wicked  Problems  Have  No  Given  Alternative  Solutions”  40 

B.  DISASTER  RELIEF  AS  A  SYSTEM . 40 

C.  A  SYSTEMS  PERSPECTIVE  FOR  DISASTER  RELIEF . 41 

1.  Narrative . 42 

2.  Identification  of  Stakeholders . 42 

D.  VARIABLE  IDENTIFICATION . 42 

E.  PROPERLY  DEPICT  THE  PROBLEM  SPACE . 43 

1.  Timeline  Generation . 44 

2.  Behavior  Over  Time  Chart . 45 

3.  Initial  Causal  Loop  Diagram . 47 

a.  Initial  Disaster  Relief  Causal  Loop  Diagram  Flow....  48 

b.  Determining  the  System  Level  Problem  Variable . 49 

4.  Properly  Frame  the  Problem . 50 

5.  Injection  Point  and  Validation . 51 

F.  FINAL  DISASTER  RELIEF  CAUSAL  LOOP  DIAGRAM . 53 

vii 


IV.  A  COMMUNICATION  STRATEGY  FOR  DISASTER  RELIEF . 55 

A.  TRUSTED  ORGANIZATION  FOR  INTEGRATION  MANAGEMENT.  55 

B.  COMMUNICATION  STRATEGY  CONCEPTS . 57 

1.  Providing  a  Connection . 58 

2.  Information  and  Communications  Technoiogy  Soiution 

Concept . 59 

a.  ICT  Mobile . 60 

b.  ICT  Lite . 62 

c.  ICT  Standard . 64 

3.  Power  Generation  for  Soiutions . 68 

C.  A  4C  INTEGRATION  INTERFACE . 69 

1.  Ownership,  Impiementation,  Administration,  and 

Hosting . 69 

2.  Cioud  Modeis  of  Service  and  Depioyment . 72 

3.  Private  Community  Disaster  Reiief  Pians  and 

Partnerships . 74 

4.  Private  Community  Appiication  Interface . 78 

a.  Interface  Account  Creation . 79 

b.  Interface  Command  and  Control . 80 

c.  Integration  with  Existing  4C  Products . 81 

d.  Common  Operational  Picture . 82 

e.  Disaster  Alert  System . 84 

5.  Mobile  Application  Interface . 86 

V.  CYBERSECURITY . 89 

A.  INFORMATION  AND  COMMUNICATION  TECHNOLOGY 

SECURITY . 90 

B.  RESPONSIBILITY  AND  INTERFACE  DESIGN  IMPLICATIONS . 93 

1 .  Service  Agreement  and  Joint  Responsibilities . 93 

2.  Trusted  Organization  Limitations . 94 

3.  Final  Notes  for  Private  Community  and  Interface 

Security . 95 

VI.  CONCLUSION . 97 

A.  LIMITATIONS  AND  IMPLICATIONS . 100 

B.  TOPICS  FOR  FURTHER  RESEARCH . 101 

APPENDIX  A . 103 

A.  SYSTEMS  THINKING  PROCESS  DRAFT  PRODUCTS . 103 

APPENDIX  B . 109 

APPENDIX  C . 113 

APPENDIX  D . 115 

APPENDIX  E . 117 

LIST  OF  REFERENCES . 129 

INITIAL  DISTRIBUTION  LIST . 137 

viii 


LIST  OF  FIGURES 


Figure  1 .  Disaster  Relief  Vicious  Cycle . 7 

Figure  2.  United  Nations  Cluster  System . 13 

Figure  3.  NFS  FIFN  Team’s  Southeast  Asia  Network  Diagram . 19 

Figure  4.  NFS  FIFN  Team’s  Katrina  Network  Infrastructure . 23 

Figure  5.  NFS  FIFN  Team’s  Flaiti  Network  Infrastructure . 27 

Figure  6.  NFS  HFN  Team’s  ICT  Training  During  Typhoon  Haiyan  Mission . 30 

Figure  7.  Lighthouse  RTAT  Application  and  FDC  EMOFS  Integration . 31 

Figure  8.  Dialog  Map  of  the  Froposed  Question . 37 

Figure  9.  Timeline  for  Disaster  Relief  Mission  Set . 45 

Figure  1 0.  Disaster  Relief  Variable  Relationship  over  Time . 46 

Figure  1 1 .  The  Initial  Disaster  Relief  Causal  Loop  Diagram.  47 

Figure  12.  Final  Disaster  Relief  Causal  Loop  Diagram . 53 

Figure  13.  Disaster  Relief  Conceptual  Model . 58 

Figure  14.  ICT  Fackage  Options . 60 

Figure  15.  Delorme  inReach  Explorer  Extreme . 62 

Figure  16.  Hughes  9201  Broadband  Global  Area  Network  (BGAN) . 64 

Figure  17.  Very  Small  Aperture  Terminal  (Vsat) . 66 

Figure  18.  Redline  802.16  WiMAX  Line  of  Sight  (LOS)  Antenna . 67 

Figure  19.  Fersistent  Systems  WAVE  Relay  Wi-Fi  and  Foint-to-Foint  (F2F) 

Network . 68 

Figure  20.  Disaster  Relief  Cloud  Deployment  Model  Example . 75 

Figure  21 .  Service  Level  Agreement  Fartnership  Concept . 77 

Figure  22.  Frivate  Community  Relationship  Model . 78 

Figure  23.  Example  Frivate  Community  Interface . 79 

Figure  24.  Mobile  Application  Interface . 81 

Figure  25.  Mobile  Application  Interface . 84 

Figure  26.  Mobile  Application  Interface . 87 

Figure  27.  Timeline  for  Disaster  Relief  Missions . 105 

Figure  28.  Disaster  Relief  Variable  Relationship  Over  Time . 1 06 

Figure  29.  The  Initial  Causal  Loop  Diagram . 106 

Figure  30.  Final  Disaster  Relief  Causal  Loop  Diagram . 107 


IX 


THIS  PAGE  INTENTIONALLY  LEFT  BLANK 


X 


LIST  OF  TABLES 


Table  1 .  The  Redefined  Variables  for  Disaster  Relief . 43 

Table  2.  The  Balancing  Loop  Variables  for  Disaster  Relief . 52 

Table  3.  Cloud  Storage  Versus  Traditional . 71 

Table  4.  Cloud  Service  Models . 73 

Table  5.  Cloud  Deployment  Models . 74 

Table  6.  Identification,  Consolidation  and  Elimination  Steps . 104 

Table  7.  The  Redefined  Variables  for  Disaster  Relief . 105 

Table  8.  The  Balancing  Loop  Variables  for  Disaster  Relief . 107 


THIS  PAGE  INTENTIONALLY  LEFT  BLANK 


XII 


LIST  OF  ACRONYMS  AND  ABBREVIATIONS 


AAR 

APAN 

ASEAN 

BGAN 

BoT 

CAP 

CDRP 

COP 

C2 

□DOS 

DOS 

DOD 

DR 

DRP 

EMOPS 

ETC 

FACT 

FAQ 

FEMA 

FITTEST 

Team 

FLAK 

FMP 

GSM 

HA/DR 

HFN 

ICT 

IFRC 

IGO 


After  Action  Report 

All  Partners  Access  Network 

Association  of  Southeast  Asian  Nations 

Broadband  Global  Area  Network 

Behavior  over  Time 

Common  Alerting  Protocol 

Contingency  Disaster  Response  Plan 

Common  Operational  Picture 

Command  and  Control 

Distributed  Denial  of  Service 

Denial  of  Service 

Department  of  Defense 

Disaster  Relief 

Disaster  Response  Plan 

Emergency  Operations 

Emergency  Telecommunications  Cluster 

First  Assessment  and  Coordination  Teams 

Frequently  Asked  Questions 

Federal  Emergency  Management  Agency 

Fast  IT  and  Telecommunications  Emergency  and  Support 

Fly  Away  Kit 

Frequency  Management  Plan 

Global  System  for  Mobile  Communications 

Humanitarian  Assistance  and  Disaster  Relief 

Hastily  Formed  Networks 

Information  and  Communications  Technology 

International  Federation  of  Red  Cross/Red  Crescent 

International  Government  Organizations 

xiii 


IHC 

InSTEDD 

International  Humanitarian  Community 

Innovative  Support  To  Emergency  Diseases  and  Disasters 

ISP 

Internet  Service  Provider 

MOU 

Memorandum  of  Understanding 

NATO 

North  Atlantic  Treaty  Organization 

NDMA 

National  Disaster  Management  Agency 

NCOS 

Nongovernmental  Organizations 

NPS 

Naval  Postgraduate  School 

OCHA 

Office  for  Coordination  of  Humanitarian  Affairs 

PDC 

Pacific  Disaster  Center 

QDR 

Quadrennial  Defense  Review 

RTAT 

Assessment  Team 

Rapid  Information  and  Communication  Technology 

SLA 

Service  Level  Agreement 

UN 

United  Nations 

UNDAC 

United  Nations  Disaster  Assessment  and  Coordination 

US 

United  States 

VSAT 

Very  Small  Aperture  Terminal 

VoIP 

Voice  Over  Internet  Protocol 

WFP 

World  Food  Program 

Wi-Fi 

Wireless  Fidelity  (802.11  standard) 

WiMAX 

Worldwide  Interoperability  for  Microwave  Access  (802.16 

standard) 

WPF 

Working  Partners  Foundation 

40 

Communications,  Coordination,  Cooperation,  Collaboration 

XIV 


ACKNOWLEDGMENTS 


First,  I  would  like  to  give  thanks  to  God.  Through  His  love  and  comfort,  I 
was  able  to  endure  the  late  nights.  I  would  also  like  to  thank  God  for  providing 
me  with  a  loving  and  supportive  family.  Thank  you,  Yvonne,  Wesley,  Kady,  and 
Michael,  for  your  love,  support,  and  inspiration  throughout  this  last  eighteen 
months.  Without  you  guys,  I  would  not  be  where  I  am  today. 

A  special  thank-you  goes  to  Brian  Stockier,  Dr.  Rebecca  Goolsby,  Dr. 
Nancy  Roberts,  and  Brooks  King  for  providing  support,  insight,  education,  and 
freely  contributing  their  expertise  to  this  endeavor.  Their  contributions  to  this 
project  provided  a  unique  perspective,  created  excitement,  fostered  creativity, 
and  kept  me  on  target. 


XV 


THIS  PAGE  INTENTIONALLY  LEFT  BLANK 


XVI 


I.  THESIS  OVERVIEW 


A.  INTRODUCTION 

A  disaster  can  occur  anywhere  with  little  to  no  warning.  The  devastating 
effects  of  disasters  have  global  implications.  For  example,  in  December  2004,  an 
earthquake  in  Indonesia  formed  a  series  of  tsunamis  that  resulted  in  the  death  of 
approximately  230,000  people  in  Southeast  Asia."!  In  August  2005,  Hurricane 
Katrina  wiped  out  most  of  New  Orleans  and  the  Mississippi  delta.2  In  January 
2010,  an  earthquake  in  Haiti  destroyed  the  infrastructure,  resulting  in  more  than 
220,000  deaths. 3  Finally,  in  November  2012,  Typhoon  Haiyan  ravaged  the 
islands  of  the  Philippines,  affecting  over  thirteen  million  people  throughout  the 
Pacific.^ 

Disasters  provide  the  international  community  with  opportunities  to  work 
together  to  help  victims  recover  from  disasters.  As  fellow  inhabitants  of  this 
orb,  we  must  do  everything  in  our  power  to  provide  support  and  stability  to 
the  victims  and  governments  that  are  affected.  The  stakeholders  in  disaster 
relief  (DR)  include  all  parties  impacted  by  disasters.  Stakeholders  include  the 
victims  and  their  families,  early  responders,  governments,  militaries,  commercial 
organizations,  non-profit  organizations,  and  essentially  every  country  on  the 
planet. 


Over  the  last  sixty  years,  stakeholders  have  attempted  to  improve  support 
for  disaster  relief  through  organizational  restructuring,  establishing  national 


1.  Raziye  Akkoc,  “2004  Boxing  Day  Tsunami  Facts,”  The  Telegraph,  Accessed  3  March 
2015,  http://www.telegraph.co.Uk/news/worldnews/asia/1 13031 14/2004-Boxing-Day-tsunami- 
facts.html. 

2.  Bryan  L.  Bradford,  Steve  Urrea,  and  Brian  Steckler,  “After  Action  Report  and  Lessons 
Learned  from  The  Naval  Postgraduate  School’s  Response  to  Hurricane  Katrina”  (master’s  thesis. 
Naval  Postgraduate  School,  September  2005),  2-231. 

3.  Brian  Steckler,  “Hastily  Formed  Networks  in  Haiti,  Haiti  Earthquake  After  Action  Report  and 
Lessons  Learned  (AAR/LL)”  (Naval  Postgraduate  School,  8  September  2010),  1-23. 

4.  Joshua  Wadell  and  Brian  Steckler,  “Marine  C2  in  support  of  HA/DR:  Observations  and 
Critical  Assessments  Following  Super-Typhoon  Haiyan”  (19th  International  Command  and 
Control  Research  and  Technology  Symposium,  2013). 
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policies,  and  implementing  innovative  technologies.  International  organizations, 
such  as  the  United  Nations,  changed  their  organizational  structures  to  provide 
organization  and  stability  to  the  victims  of  disasters. ^  National  policies,  such  as 
the  U.S.  Quadrennial  Defense  Review,  express  the  nation’s  intent  to  support  DR 
efforts.  International  DR  mission  teams  are  harnessing  cutting-edge  technologies 
to  provide  on-site  relief  assistance  to  the  people  affected  by  disasters. 
Organizations  provide  innovative  platforms  to  facilitate  collaboration  and 
situational  awareness  for  DR  missions. 

B.  PROBLEM  STATEMENT 

The  United  Nations  states  “governments  and  militaries  are  systems  that 
have  a  major  role  in  disaster  relief  and  assistance.”®  Prior  to  the  Internet  boom, 
they  were  the  best  systems  for  organizing  relief  efforts  and  providing  services 
and  resources  in  a  disaster^;  “The  old  way  of  doing  things  made  the  hierarchy 
entirely  responsible  for  the  outcome,  be  that  the  government,  the  military  or 
whatever  entity  was  at  the  top  of  the  hierarchy.”®  This  includes  failures  due  to 
factors  outside  of  the  organization’s  control. 

This  problem  becomes  more  complex  when  multiple  (country,  state,  and 
city)  governments  become  involved,  each  with  its  own  culture  of  responsibility 
and  methods  of  dealing  with  failure.  Governments  and  militaries  of  the  same 
nation-state  have  different  standards,  processes,  and  procedures.  When  dealing 
with  complex  events  jointly,  these  standards,  processes,  and  procedures  can 
create  internal  conflict.  This  situation  is  further  complicated  by  the  lack  of 


5.  United  Nations,  UN  Humanitarian  Civii-Miiitary  Coordination  Officer  Fieid  Handbook  {Otf\ce 
for  the  Coordination  of  Humanitarian  Affairs  Civil-Military  (Emergency  Services  Branch,  Geneva, 
2008). 

6.  Ibid. 

7.  Ibid. 

8.  Ibid. 
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international  legislation  and  alignment  between  civil  and  military  entities  that  deal 
with  joint  concerns  inherent  in  disaster  relief.^ 

This  also  leads  to  the  development  of  “dysfunction  in  the  system. ’’"'o 
Hidden  agendas,  compartmentalization,  proprietary  information,  information 
hoarding,  and  trust  issues  reduce  the  willingness  for  organizations  to  work 
together  constructively.  Past  assumptions  were  that  the  government,  military, 
and  other  hierarchical  organizations  best  understood  the  situation  because  they 
possessed  the  best  channels  of  communication  and  the  resources  needed  to 
address  the  problems.'''' 

Disaster  relief  (DR)  is  an  international  based  system  of  systems  because 
its  individual  components  are  part  of  another  complex  system.  All  subsystems 
within  DR,  governments,  militaries,  nongovernmental  organizations,  commercial 
organizations,  and  victims  of  the  disaster  constitute  the  system-level 
stakeholders.  The  internal  issues  inherent  in  the  subsystems  compound  issues 
within  the  DR  system.  Some  of  the  main  issues  within  the  DR  system  are  the 
lack  of  command  and  control,  common  collaboration  and  situational  awareness, 
and  communication  enabling  capability. 

To  correct  these  issues  the  stakeholders  worked  independently  to  provide 
solutions  to  the  system-wide  issues  of  DR.  The  United  Nations  established  the 
cluster  system, ''2  the  U.S.  Government  established  the  All  Partners  Access 
Network  (APAN),'"^  and  the  commercial  sector  developed  information  and 
communications  technology  deployment  kits.  All  of  these  solutions  provided  key 
functions  to  resolve  issues  identified  within  the  DR  system.  The  restructuring  and 
technological  advancements  represented  an  unparalleled  capability  for  the  relief 

9.  Ibid. 

10.  Ibid. 

11.  Ibid. 

12.  United  Nations,  “About,”  Office  for  Coordination  of  Humanitarian  Affairs,  Accessed  23 
September  2014,  http://www.humanitarianresponse.info/about. 

13.  All  Partners  Access  Network.  “About  page,”  accessed  26  October  2014. 
https://community.apan.0rg/p/about.aspx. 
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effort.  These  solutions  improved  communications,  coordination,  cooperation,  and 
collaboration  between  the  responders  and  resulted  in  lives  saved.  However,  due 
to  legislative  issues,  information  hoarding,  and  complex  social  implications  of 
interdependent  systems,  the  solutions  only  treat  the  symptoms  of  the  system- 
level  problem  in  DR.  These  solutions  do  not  resolve  problems  at  the  system  level 
for  DR. 

Today,  a  new,  less  hierarchical  system  of  organizations  and  information 
streams  addresses  the  wicked  problem  of  disaster.  Problems  that  are  considered 
wicked  are  very  complex  and  possess  significant  social  implications  due  to  the 
variety  of  stakeholders.  These  less  hierarchical  systems  are  ad  hoc,  disjointed, 
and  have  their  own  problems.  The  new  dysfunctions  are  in  some  ways,  the  same 
as  the  old  dysfunctions:  information  hoarding  to  maintain  control,  avoid  blame, 
get  credit  and  recognition,  and  improve  one’s  performance  over  one’s 
competitors.  However,  the  new  flatter,  more  diverse  system  also  results  in 
information  fragmentation  as  more  and  more  people  hold  critical  pieces  of 
information.  Critical  information  is  then  only  partially  shared  with  friends  or 
aligned  agencies.  One  of  the  incentives  for  this  information  hoarding  is  to  not 
reveal  one’s  own  miss-steps  and  miscalculations. 

The  lack  of  open  sharing  fragments  and  complicates  DR  teams’ 
interactions  on  the  ground.  Fragmentation  of  critical  information  distribution 
reduces  response  quality  and  unintentionally  injects  anarchy  into  the  system. 
Attempts  to  repair  this  fragmentation,  selectively  creates  multiple  information 
sharing  solutions  that  confuse  teams  attempting  to  cooperate. Multiple 
information  sharing  sources  create  a  feeling  of  information  overload,  which  could 
reduce  the  desire  for  the  teams  to  work  together  in  a  synchronized  manner. 

The  issues  mentioned  reflect  the  nature  and  relationships  of 
interdependent  components  in  today’s  DR  system  of  systems.  The 

14.  Larry  Wentz,  “Haiti  Information  and  Communications  Observations:  Trip  report  for  Visit  18 
February  to  1  March  2010,”  Center  for  Technology  and  National  Security  (National  Defense 
University,  Washington,  DC,  08  August  2010). 
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interdependencies  work  in  concert  to  increase  system-level  anarchy. "is  Anarchy 
in  the  DR  system  is  the  ultimate  state  of  disorder,  uncertainty,  instability, 
insecurity,  and  identification  of  leadership.  A  fragmented  and  disjointed  response 
along  with  increased  anarchy,  results  in  avoidable  post-disaster  injuries  and 
deaths,  especially  within  the  first  72  hours.  Figure  1  illustrates  some  system-level 
variables  that  have  a  significant  impact  on  the  current  DR  system. 

Looking  at  the  social  challenges  within  international  disaster  relief  (DR) 
missions,  some  organizations’  agendas  and  aspirations  take  precedence  over 
providing  relief  to  the  victims.''®  Eyewitness  testimony  identifies  this  behavior 
occurring  during  Hurricane  Katrina  in  2005  and  again  in  the  2012  Philippine 
mission.''^  The  victims  and  their  governments  do  not  want  mission  teams  to  take 
over  and  impose  foreign  value  systems,  but  they  do  desire  assistance  with 
locating  lost  family  members  and  recovering  from  the  disaster.''®  The  victims  are 
simply  trying  to  survive  in  the  aftermath  of  the  disaster  and  do  not  care  about 
organizational  agendas  and  objectives. ''^  Disaster  relief  is  about  working  together 
as  a  community  to  provide  life-saving  efforts,  support,  and  aid  to  the  victims  of  a 
disaster.20 

In  order  for  the  international  community  to  successfully  provide  this 
service,  responders  should  present  a  synchronized,  unified  front.  The 
international  community  should  develop  ways  to  encourage  open  and 
transparent  information  sharing.  The  international  community  should  work 
together  to  develop  a  functional  communications  strategy  for  DR.  For  a 

15.  Nancy  Roberts,  “Coping  with  Wicked  Problems”  Classroom  Instruction  (Monterey,  CA,  22 
September-18  December  2014). 

16.  Brian  Steckler,  “Hastily  Formed  Networks  for  HA/DR,”  Classroom  Instruction  (Naval 
Postgraduate  School,  Monterey,  CA,  22  June-16  September  2014). 

17.  Ibid. 

18.  Ibid. 

19.  Victoria  Richards,  “Cyclone  Pam:  Vanuatu  will  run  out  of  food  “in  a  week”  as  officials  slam 
aid  agencies  for  wanting  ‘publicity,’”  19  March  2015, 

http://www.independent.co.uk/news/world/australasia/cyclone-pam-vanuatu-will-run-out-of-food- 
in-a-week-as-officials-slam-aid-agencies-for-wanting-publicity-1 01 19369.html. 

20.  Ibid. 
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communications  strategy  to  change  DR  at  the  system  level,  the  international 
community  must  embrace  a  communications  strategy  that  increases 
communication, 21  coordination,22  cooperation, 23  and  collaboration24  (4C) 
between  disaster  relief  mission  teams.  This  is  the  4C  approach  or  framework. 

The  4C  approach  involves  setting  up  the  conditions  that:  (1)  encourage 
free  flow  of  communication  among  diverse  holders  of  information;  (2)  provide 
the  capability  to  identify  and  share  the  critical  information  needed  for  individual, 
independent  or  semi-independent  actors  to  know  more  about  the  “big  picture”  of 
events,  problems,  needs,  and  activities  so  they  can  coordinate  their  actions 
and  activities  with  other  actors;  (3)  assist  actors  in  the  system  to  identify  gaps 
and  issues  that  require  cooperation  among  actors;  and  (4)  encourage 
coiiaboration  by  promoting  limited,  contextualized  trust  among  actors  who 
might,  in  other  situations,  see  one  another  as  rivals,  competitors  or  even 
adversaries. 

Based  on  systems-level  research,  the  author  developed  the  4C  framework 
to  address  key  variables  within  the  DR  system.  Reduced  4C  during  disaster  relief 
missions  diminishes  the  quality  of  the  relief,  increases  the  duration  of  the 
mission,  and  presents  an  unsynchronized,  non-unified  front.  The  lack  of  a  non- 
unified  front  for  disaster  relief  missions  increases  a  kind  of  anarchy  that  can 
result  in  preventable  post-disaster  damage,  injuries,  and  loss  of  life. 

This  thesis  analyzes  the  DR  system  and  its  social  complexities.  It  frames 
the  system-level  problem,  and  identifies  the  system-level  solution  entry  point. 


21.  MRS  Inc.  and  Black  Swan  Solutions,  “Communicating  in  a  Crisis,”  MRS  and  Black  Swan 
Solutions  Joint  Webinar,  20  January  2015.  http://www.mirS.com/mirS-inc-and-black-swan- 
solutions-present-joint-webinar-on-communicating-in-a-crisis/. 

22.  Nancy  Roberts,  “Coping  with  Wicked  Problems”  Classroom  Instruction  (Monterey,  CA,  22 
September-18  December  2014). 

2S.  Ibid. 

24.  Defense  Advanced  Research  Projects  Agency,  “Request  for  Information  (RFI):  Strategic 
Collaboration,”  DARPA  White  Paper  Request  (FedBizOpps.gov.  2  April  2007), 
https://www.fbo. gov/index?s=opportunity&mode=form&id=c705f867a67b945de0S592276252b60 
5&tab=core&  cview=0. 
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Based  on  the  findings,  this  thesis  proposes  a  communications  strategy  concepts 
designed  to  reduce  the  overall  anarchy  within  the  system.  A  reduction  in  anarchy 
within  the  DR  system  could  potentially  reduce  post-disaster  damage,  injuries, 
and  loss  of  life. 


S-  Same  =lncrease  or  decrease  in  one  variable  causes  the  same 
reaction  with  its  neighbor. 

O-  Opposite  =  Increase  or  decrease  in  one  variable  induces  an  opposite 
reaction  with  its  neighbor. 


Figure  1 .  Disaster  Relief  Vicious  Cycle.^s 

C.  STRUCTURE  AND  SCOPE 

In  Chapter  II,  this  thesis  discusses  solutions  implemented  to  address 
specific  problems  of  communication  within  DR.  It  continues  with  an  introduction 
to  current  information  and  communications  technology  (ICT)  example  and 
explores  significant  issues  identified  from  DR  missions.  Chapter  II  further 
provides  a  brief  summary  of  past  and  present  implementations,  elucidating  and 
justifying  how  previous  solutions  have  failed  to  reduce  information  anarchy  within 


25.  Anderson,  Virginia  and  Lauren  Johnson,  Systems  Thinking  Basics:  From  Concepts  to 
Causai  Loop  (Waltham,  MA:  Pegasus  Communications,  1997). 
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the  DR  system.26  Information  anarchy  is  the  problem  of  disjointed,  ad  hoc 
information  sharing  and  the  poor  situation  awareness  that  results  from  a  system 
that  fails  to  promote  or  encourage  the  free  flow  of  communications,  impeding 
coordination,  discouraging  cooperative  behavior,  and  providing  very  limited 
incentives  for  collaboration  (i.e.,  “reduced  4C”). 

Chapter  III  introduces  the  concept  of  wicked  problems.  It  then  compares 
the  issues  in  DR  with  known  characteristics  of  wicked  problems  to  formally 
identify  it  as  a  wicked  problem  with  system-level  issues.  The  chapter  then 
explores  the  DR  system  using  the  Systems  Thinking  process.  The  Systems 
Thinking  process  allows  a  better  understanding  of  the  physical  characteristics 
and  social  implications  of  the  problem  space.  The  chapter  continues  with  an 
introduction  to  injection  points  and  balancing  mechanisms.27  Injection  points  and 
balancing  mechanisms  depict  a  section  within  the  system  where  a  solution  may 
reduce  the  anarchy  within  the  DR  system.28 

Chapter  IV  begins  with  an  introduction  to  a  communication  strategy  for  DR 
missions.  The  communications  strategy  combines  an  ICT  capability  with  a  cloud 
based,  decentralized,  integrated  4C  interface  concept.  This  chapter  continues 
with  a  design  structure  proposal  for  the  integration  interface  concept.  The 
discussion  concludes  with  a  brief  overview  of  security  implications  for  the 
proposed  concept  model  and  a  short  summary  of  the  combined  communication 
strategy. 

Chapter  V  introduces  some  general  security  considerations.  The  chapter 
addresses  security  of  data-at-rest  and  data-in-transit.  The  chapter  approaches 
security  considerations  of  critical  components  of  the  security  strategy. 


26.  Rebecca  Goolsby,  telephone  call  with  author,  5  March  2015. 

27.  Anderson,  Virginia  and  Lauren  Johnson,  Systems  Thinking  Basics:  From  Concepts  to 
Causai  Loop  (Waltham,  MA:  Pegasus  Communications,  1997),  2-21. 

28.  Ibid. 
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The  thesis  conclusion  provides  a  summary  of  the  concepts  discussed  in 
the  thesis.  Conceptually,  creating  an  internationally  accepted  communication 
strategy  reduces  DR  system-level  anarchy. 

D.  BENEFITS  OF  THE  THESIS 

The  2014  U.S.  Quadrennial  Defense  Review  (QDR)  states  the  following: 
“Protect  the  homeland,  to  deter  and  defeat  attacks  on  the  United  States  and  to 
support  civil  authorities  in  mitigating  the  effects  of  potential  attacks  and  natural 
disasters. ”29  Another  key  goal  in  the  QDR  is  to  “Project  power  and  win  decisively, 
to  defeat  aggression,  disrupt  and  destroy  terrorist  networks,  and  provide 
humanitarian  assistance  and  disaster  relief.”39 

To  maintain  compliance  with  this  mandate,  the  Department  of  Defense 
(DQD)  and  the  U.S.  government  must  work  with  the  international  community  to 
support  disaster  relief  (DR)  missions.  This  thesis  investigates  potential  solutions 
that  support  compliance  with  the  2014  QDR.^"! 

From  an  international  DR  stakeholder  perspective,  this  document 
represents  a  preliminary  model  of  framing  the  problem  space  within  the  DR 
system.  By  analyzing  the  broader  system-level  problems  within  the  DR  system, 
mission  stakeholders  can  refine  this  concept  to  design  solutions  that  reduce 
anarchy  within  the  system.  Furthermore,  the  implementation  of  a 
communications  strategy  has  the  potential  to  encourage  open  and  transparent 
communication,  coordination,  cooperation,  and  collaboration  (4C)  within  the 
international  community. 


29.  U.S.  Department  of  Defense,  Quadrennial  Defense  Review  20^4  (Washington,  DC:  Office 
of  the  Secretary  of  Defense,  March  2014),  V 

30.  Ibid. 

31.  U.S.  Department  of  Defense,  Quadrennial  Defense  Review  20^4  (Washington,  DC:  Office 
of  the  Secretary  of  Defense,  March  2014),  22,  25,  33. 
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II.  BACKGROUND 


A.  PREVIOUS  AND  CURRENT  SOLUTIONS 

Over  the  last  60  years,  many  different  concepts  have  been  independently 
introduced  to  correct  known  DR  shortfalls.  The  implemented  solutions  added 
organization  and  enabled  communications,  but  lacked  the  impact  and  support  to 
encourage  international  open  4C  participation  for  DR  missions.  These  solutions 
succeeded  in  treating  the  symptoms  of  the  problem  but  failed  to  address  the 
system-level  problem.  Solutions  that  treat  symptoms  of  system-level  problems 
will  likely  result  in  adding  new  unanticipated  problems. 

The  sections  that  follow  briefly  introduce  previous  and  current  solutions  for 
DR: 

•  Organization  solutions 

•  Collaborative  solutions 

•  Communication  enabling  solutions 

1.  Organization  Solutions 

In  1942,  the  United  Nations  (UN)  was  established  to  promote  international 
cooperation  and  to  combat  Axis  powers. 32  |n  1945,  the  United  Nations  Charter 
was  ratified  bringing  50  nation  states  into  an  allegiance  to  promote  peace. 33  Cver 
several  decades,  the  United  Nations  added  members  and  changed  through 
collaborative  planning. 34 

In  1991,  the  UN  convened  and  passed  the  General  Assembly  Resolution 
46/182,  which  set  the  foundation  for  UN  DR  missions. 35  In  2005,  the 


32.  United  Nations,  “History  of  the  United  Nations,”  UN  Online,  assessed  01  October  2014, 
http://www.  u  n  .org/e  n/a  boutu  n/h  istory/ 

33.  Ibid. 

34.  Ibid. 

35.  United  Nations,  “About,”  Office  for  Coordination  of  Humanitarian  Affairs,  accessed  23 
September  2014,  http://www.humanitarianresponse.info/about. 
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Humanitarian  Reform  Agenda  introduced  several  changes  within  the  UN  to 
address  identified  issues  with  predictability,  accountability,  and  partnership. 36 
The  Reform  Agenda  passed  legislation  to  reorganize  the  UN  into  clusters. 37  A 
cluster  is  a  group  of  organizations  or  stakeholders,  with  a  designated  leader, 
working  in  a  specified  area  designed  to  fill  existing  capability  gaps. 38  Figure  2 
represents  the  UN  organizational  cluster  system.  Despite  the  organizational 
cluster  system  of  the  United  Nations,  information  anarchy  remains  a  constant 
problem  throughout  the  DR  system. 39 


36.  United  Nations,  “What  is  the  Cluster  Approach?”  Office  for  the  Coordination  of 
Humanitarian  Affairs,  assessed  26  October  2014, 

http://www.humanitarianresponse.info/clusters/space/page/what-cluster-approach. 

37.  Ibid. 

38.  United  Nations,  UN  Humanitarian  Civii-Miiitary  Coordination  Officer  Fieid  Handbook, 
Office  for  the  Coordination  of  Humanitarian  Affairs,  Emergency  Services  Branch,  Geneva,  2008, 
p.124. 

39.  Brian  Steckler,  “Hastily  Formed  Networks  for  HA/DR.”  Classroom  Instruction  (Naval 
Postgraduate  School,  Monterey,  CA.  22  June-16  September  2014). 
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Figure  2.  United  Nations  Cluster  System.^o 


One  of  the  main  issues  with  an  organization  restructuring  solution  is  that  it 
is  internal  to  the  organization  and  is  not  applied  or  accepted  globally.  There  is  no 
official  legislation  appointing  an  organization  as  a  recognized  international  body 
for  DR.  The  design  of  the  UN  Cluster  System  is  not  the  reason  that  the 
organizational  restructuring  solution  continues  to  fail.  The  lack  of  international 
trust  and  social  complexity  of  an  international  DR  mission  simply  does  not 
support  a  centralized  command  structure.  This  could  be  an  advantage,  as  a 
flatter  organization  structure  can  be  more  agile  in  disasters.  Actors  with  limited 
trust  among  themselves  have  more  freedom  to  act  individually  or  in  concert  with 


40.  United  Nations,  “What  is  the  Cluster  Approach?”  Office  for  the  Coordination  of 
Humanitarian  Affairs,  assessed  26  October  2014, 

http://www.humanitarianresponse.info/clusters/space/page/what-cluster-approach. 
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only  highly  trusted  partners;  further,  they  are  weighed  down  with  fewer  obstacles 
to  acting.  However,  the  cluster  system  provides  problems  for  information  flow 
that  lead  to  situations  of  reduced  4C  (lack  of  communication,  coordination, 
cooperation,  and  collaboration)  so  that  even  information  flow  among  trusted 
partners  is  fragmented,  disjointed,  and  partial.  This  has  long  been  a  recognized 
problem,  with  a  number  of  attempts  to  solve  it  in  the  last  two  decades. 

2.  Collaborative  Solutions 

Over  the  last  decade,  many  different  vendors  developed  solutions  to 
provide  a  medium  for  international  DR  collaboration.  These  collaborative 
solutions  provided  vital  capabilities  to  the  international  community  and  DR 
stakeholders.  Many  of  the  collaborative  solutions  are  still  in  use  today.  One  of  the 
solutions  currently  in  use  is  the  All  Partner  Access  Network  (APAN)  website. 

APAN  was  originally  developed  and  implemented  in  1997  for  the  United 
States  Pacific  Command  (PACOMj.^i  The  portal  provides  a  community  space  for 
collaboration  between  international  mission  teams.42  There  are  several  reasons 
APAN  is  not  widely  embraced  internationally.  Wentz’s  observation  report 
describes  these  barriers.  First,  the  U.S.  Armed  Forces  developed  and  currently 
manages  APAN.  Second,  creating  an  APAN  user  account  requires  the  user  to 
provide  a  good  deal  of  personal  information.  The  international  community  as  a 
whole  does  not  maintain  a  mutual  transparent  trust  relationship  with  the  U.S. 
Armed  Forces.  The  lack  of  transparency  and  compartmentalization  practices, 
used  within  the  U.S.  Armed  Forces,  discourages  open  sharing  across  the 
international  DR  community.  Furthermore,  in  some  countries,  cooperation  with 
the  U.S.  military  may  put  the  lives  of  participants  and  their  families  in  danger.  The 
distrust  between  DR  entities  ultimately  inspired  the  international  community  to 
develop  and  rely  on  its  own  collaborative  solutions. 


41 .  All  Partners  Access  Network,  “About  page,”  accessed  26  October  2014, 
https://community.apan.0rg/p/about.aspx. 

42.  Ibid. 
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other  problems  with  APAN  acceptance  include  the  problem  of  getting  all 
players  to  accept  the  centralized  access  model  for  distributing  information  and 
inefficiencies  within  the  platform  itself AARs  from  the  international  community 
also  identify  issues  with  the  centralized  access  control  model  and  platform 
inefficiencies.  To  access  resources  on  APAN,  individuals  must  request 
permission  to  a  specific  resource  or  group,  justify  their  request  to  a  higher 
authority,  and  wait  for  access.  A  centralized  model  that  introduces  layers  of 
bureaucracy  into  a  collaboration  system  will  likely  foster  distrust  and  discourage 
open  sharing. 

Most  of  the  collaborative  solutions  developed  over  the  years  support  a 
hierarchical  and  centralized  model.  Instead  of  allowing  the  governing  body 
affected  by  the  disaster  to  lead  collaboration  efforts,  previous  models  rely  on  the 
solution  provider  as  collaboration  lead  for  DR  events.  The  social  complexities  of 
DR,  combined  with  the  centralized  models  of  collaboration,  do  not  support  an 
open  and  transparent  relationship.  International  distrust  between  teams  and 
distributed  information  increases  confusion  and  anarchy  in  the  DR  system.44 

As  was  the  case  in  2011  and  still  today,  no  singularly  recognized 
international  platform  successfully  encourages  open  and  transparent 
collaboration. 45  For  a  collaborative  solution  to  be  internationally  accepted,  the 
model  used  must  inspire  open  and  transparent  sharing  of  information. 

3.  Information  and  Communications  Technoiogy  Soiutions 

In  today’s  world  of  crisis  response,  reliable  global  communications  is  the 
essential  foundation  for  success  for  DR  efforts.  Search  and  rescue  operations, 
the  establishment  of  aid  stations,  and  the  coordination  of  lift  and  drop  of  essential 

43.  Larry  Wentz,  “Haiti  Information  and  Communications  Observations:  Trip  report  for  Visit  18 
February  to  1  March  2010,”  Center  for  Technology  and  National  Security  (National  Defense 
University,  Washington,  DC,  08  August  2010). 

44.  Ibid. 

45.  Naim  Kapucu  Ph.D.,  “Collaborative  governance  in  international  disasters:  Nargis  Cyclone 
in  Myanmar  and  Sichuan  Earthquake  in  China  cases,”  International  Journal  of  Emergency 
Management,  8(1).  2011,  1-25. 
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supplies  and  resource — every  essential  element  of  the  response  needs 
communication  (and  power).  Communications,  coordination,  cooperation,  and 
collaboration  (4C)  for  disaster  relief  missions  require  a  network  connection. 
Implementing  a  mobile  contingency  communications  package  or  information 
communications  and  technology  (ICT)  constitutes  another  solution  developed  to 
enable  4C  for  mission  teams.  ICT  is  a  communications  enabler  and  provides  a 
required  connection  capability  for  the  responder  teams.  The  ability  of  teams  to 
communicate  when  normal  communication  infrastructure  goes  down  is  an 
invaluable  asset  to  international  DR.  With  the  demand  for  DR  ICT  solutions  high, 
many  ICT  providers  saw  a  need  to  fill  the  gap.  As  a  result,  there  are  hundreds  of 
communications  enabling  solutions  available. 

With  all  of  these  solutions  available,  users  are  bound  to  encounter  some 
interoperability  issues.  Interoperability  issues  can  ultimately  affect  the  ability  of  a 
DR  team  to  successfully  communicate.  If  the  mission  teams  are  incapable  of 
effectively  coordinating  with  participating  teams,  they  may  inadvertently  become 
centrally  located.  Satellite  bandwidth  saturation  can  quickly  become  an  issue 
when  a  significant  number  of  satellite  based  ICTs,  operating  on  the  same 
frequency  band,  deploy  to  a  small  geographical  area.^e 

ICT  packages  are  comprised  of  computer  and  network  equipment.  ICT 
packages  equip  small  to  large  teams  with  network  connection  capability  in  areas 
that  have  limited  power  and  communications  resources.  ICT  packages  are  critical 
components  for  participating  in  communication,  coordination,  cooperation,  and 
collaboration  (4C)  during  disaster  relief  missions.  4C  activities  provide  a  means 
to  increase  relief  effort  response  quality,  ultimately  resulting  in  saving  lives.  When 
used  effectively,  an  ICT  capability  enables  communication  and  facilitates 
coordination  between  mission  teams  on  the  ground.  One  such  example  of  an 
effective  ICT  is  Hastily  Formed  Networks. 


46.  Brian  Sleekier,  “Hastily  Formed  Networks  in  Haiti.  Haiti  Earthquake  After  Action  Report 
and  Lessons  Learned  (AAR/LL)”  (Naval  Postgraduate  School,  Monterey,  CA.  8  September 
2010). 
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In  2004,  Dr.  Peter  Denning  coined  the  term  “Hastily  Formed  Networks” 
(HFN)  and  enlisted  Brian  Steckler  to  establish  a  lab  at  the  Naval  Postgraduate 
School  (NPS).47  The  HFN  concept  enables  a  small  team  of  communications 
experts  with  an  ICT  capability  to  provide  an  operations  command  and  control 
center  in  support  of  global  DR  efforts.^s  The  NPS  HFN  team  is  a  two  to  seven 
person  team,  capable  of  rapidly  deploying  a  mobile  command  and  control 
communications  capability  in  support  of  minimal  notice  Humanitarian  Assistance 
and  Disaster  Relief  (HA/DR)  missions.  To  date,  the  NPS  HFN  team  has 
supported  four  major  international  DR  deployments  and  participated  in  numerous 
international  military  and  state  sponsored  training  exercises.  Through 
deployments  and  training  exercises,  the  NPS  HFN  team  constantly  transforms  its 
deployment  packages  to  resolve  issues  discovered. 

B.  HASTILY  FORMED  NETWORKS  DEPLOYMENT  REVIEW 

1.  Southeast  Asia  Tsunami  Depioyment 

The  first  official  test  of  the  HFN  concept  occurred  during  the  deployment  to 
Southeast  Asia.^s  On  December  26,  2004,  as  a  result  of  a  massive  9. 0-9. 3 
earthquake  in  Indonesia,  tsunamis  were  generated,  affecting  eleven  countries. 
As  a  relatively  newly  formed  DR  mission  concept,  the  NPS  HFN  team  was 
tasked  to  establish  two  broadband  networks.  In  its  early  phases,  HFN  did  not 
possess  the  scalability  or  capacity  required  to  support  the  event  without 
commercial  partner  assistance. In  order  to  address  the  shortcomings,  ad-hoc 
partnerships  were  formed  to  provide  support,  technical  expertise,  and  additional 


47.  Peter  J.  Denning  Ph.D.,  “Hastily  Formed  Networks,”  Communications  of  the  ACM  49,  No. 
4.  April  2006,  accessed  15  May  2014. 

http://faculty.nps.edu/dl/HFN/documents/HastilyFormedNetworks_Denning.pdf. 

48.  Ibid. 

49.  Brian  Steckler,  “Hastily  Formed  Networks:  A  report  on  Naval  Postgraduate  School 
Response  to  the  2004  Southeast  Asia  Tsunami”  (Naval  Postgraduate  School,  Monterey,  CA.  25 
July  2005). 

50.  Ibid. 

51.  Ibid. 
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equipment.  Partnerships  were  formed  with  Redline  Communications  (802.16 
WiMAX),  Rajant  Corporation  (802.11  Wi-Fi),  and  Cisco  Corporation  (Network 
Router,  VolP).52 

On  January  4,  2004,  Brian  Steckler,  the  HFN  communications  expert,  and 
his  team  arrived  in  Bangkok,  Thailand. jhe  first  steps  of  the  mission  required 
coordinating  local  government  and  the  Royal  Thai  Armed  Forces  support.  On 
January  8,  2005,  the  team  began  to  establish  its  first  hasty  network  connection  at 
the  Yang  Yao  Grave  Registration  Center  and  Morgue. ^4  The  team’s  secondary 
site  was  located  at  the  nearby  Bang  Muang  indigenously  displaced  persons  (IDP) 
camp.  Each  site  established  a  meshed  802.11  Wi-Fi  cloud  and  was  bridged 
using  Redline  802.16  WiMAX  technology. By  harnessing  the  power  of  WiMAX 
and  meshed  Wi-Fi,  each  site’s  responders  were  able  to  connect  to  the  Internet 
and  collaborate  with  other  DR  teams.  The  HFN  implementation  allowed  for  4,000 
survivors  and  1,000  relief  support  personnel  to  communicate  with  colleagues, 
friends,  and  family  members  using  the  Internet  connection  at  each  site.56 


52.  Brian  Steckler,  “Hastily  Formed  Networks:  A  report  on  Naval  Postgraduate  School 
Response  to  the  2004  Southeast  Asia  Tsunami”  (Naval  Postgraduate  School,  Monterey,  CA.  25 
July  2005). 

53.  Ibid. 

54.  Ibid. 

55.  Ibid. 

56.  Ibid. 
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Figure  3.  NFS  HFN  Team’s  Southeast  Asia  Network  Diagram. 


Many  issues  surfaced  during  the  first  real  world  implementation  of  the 
NFS  HFN  team.  Some  of  the  significant  issues  identified  from  the  deployment 
were  as  follows: 

•  Functionality  and  durability  issues 

•  Cost  of  maintaining  network  equipment 

•  HFN  Fly  Away  Kit  (FLAK)  standard  was  not  established  or  defined 


57.  Brian  Sleekier,  “Hastily  Formed  Networks:  A  report  on  Naval  Postgraduate  School 
Response  to  the  2004  Southeast  Asia  Tsunami”  (Naval  Postgraduate  School,  Monterey,  CA.  25 
July  2005). 
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The  functionality  and  durability  of  ICT  equipment  was  a  pervasive  issue. 
The  Breadcrumb  devices  continuously  failed  during  the  deployment  and  required 
the  procurement  of  replacement  network  components. ^9  Rajant  Breadcrumb 
devices  transform  disparate  wireless  access  points  into  a  fully  meshed  Wi-Fi 
network. 60  A  meshed  network  allows  mobile  users  to  seamlessly  shift  to  the 
nearest  access  point.®"! 

The  cost  of  maintaining  the  equipment  and  providing  service  for  the 
network  was  significant.  BGAN  is  expensive  and  will  not  support  many  users 
concurrently.62  Very  small  aperture  terminal  (Vsat)  will  support  more  users 
sufficiently;  however,  setup  and  operation  requires  specific  technical  expertise 
and  can  be  significantly  more  expensive  depending  on  the  service  plan.63 

There  is  no  existing  definition  of  what  needs  to  be  in  the  FLAK.®^ 
Equipment  requirements  for  each  deployment  differ.  Steadily  changing 
requirements  complicate  defining  capabilities  needed  to  support  all  deployment 
scenarios. 


58.  Brian  Sleekier,  “Hastily  Formed  Networks:  A  report  on  Naval  Postgraduate  School 
Response  to  the  2004  Southeast  Asia  Tsunami”  (Naval  Postgraduate  School,  Monterey,  CA.  25 
July  2005). 

59.  Brian  Sleekier,  “Hastily  Formed  Networks  for  HA/DR.”  Classroom  Instruction  (Naval 
Postgraduate  School,  Monterey,  CA.  22  June-16  September  2014). 

60.  Brian  Sleekier,  “Hastily  Formed  Networks:  A  report  on  Naval  Postgraduate  School 
Response  to  the  2004  Southeast  Asia  Tsunami”  (Naval  Postgraduate  School,  Monterey,  CA.  25 
July  2005). 

61.  Brian  Sleekier,  “Hastily  Formed  Networks  for  HA/DR”  (Classroom  instruction.  Naval 
Postgraduate  School,  Monterey,  CA.  22  June-16  September  2014). 

62.  Ibid. 

63.  Ibid. 

64.  Ibid. 
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2.  Hurricane  Katrina  Deployment 

On  September  6,  2005,  the  NPS  HFN  team  deployed  to  Hancock  Medical 
Center  in  Bay  Saint  Louis,  Mississippi,  in  support  of  U.S.  DOD  DR  efforts  for 
Hurricane  Katrina.®® 

Because  Katrina  occurred  in  the  United  States,  many  technology 
companies  saw  the  disaster  as  an  opportunity  to  sell  their  products  and  services. 
As  such,  there  was  a  constant  flood  of  companies  offering  their  services  directly 
to  the  NPS  team  leadership.  These  companies  actually  caused  problems  with  the 
participation  of  the  NPS  HFN  team  in  the  mission.  When  Brian  Steckler  arrived 
with  his  HFN  team,  the  incident  commander  of  Hancock  County  Emergency 
Operations  Center  turned  the  U.S.  Navy  sponsored  HFN  team  away,  assuming 
they  were  another  vendor  trying  to  sell  their  products  and  services.  Since  HFN 
was  a  new  concept,  different  levels  of  incident  command  denied  the  NPS  HFN 
team’s  offer  to  provide  support.  Due  to  the  additional  confusion  from  information 
technology  companies,  the  incident  commander  did  not  understand  the  role  of 
the  NPS  HFN  team  and  their  capabilities  for  the  DR  mission  set.®®  However,  due 
to  Mr.  Steckler’s  diligence  and  patience,  the  NPS  HFN  team  finally  participated. 

HFN’s  layout  for  this  deployment  consisted  of  a  wide  area  network 
connection  and  a  local  area  connection.  Satellite  communications  using  a  VSAT 
terminal  established  the  connection  to  the  Internet.  The  use  of  Wi-Fi  (802.11) 
access  points,  WiMAX  (802.16)  bridge,  and  mobile  command  vehicles  enabled 
4C  for  the  mission.®^  By  increasing  the  capabilities  of  HFN  in  this  deployment, 
the  HFN  team  was  able  to  concurrently  push  out  services  to  multiple  areas. 
Improving  HFN’s  FLAK  prior  to  deployment  enabled  critical  4C  participation  for 


65.  Bryan  L.  Bradford,  Steve  Urrea,  and  Brian  Steckler,  “After  Action  Report  and  Lessons 
Learned  from  The  Naval  Postgraduate  School’s  Response  to  Hurricane  Katrina”  (master’s  thesis. 
Naval  Postgraduate  School,  September  2005). 

66.  Ibid. 
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key  first  responders  and  provided  a  way  for  the  victims  to  reestablish  contact  with 
family  members. 

The  impact  of  Katrina  on  coastal  Mississippi  has  been  described  as 
“staggering”  with  many  communities  and  towns  destroyed  in  a  single  night.s^ 
This  massive  storm  spawned  11  tornados  in  Mississippi  with  hurricane  winds 
smashing  the  coast  for  seventeen  hours.®^  Over  one  million  people  were  affected 
in  rural  areas  and  had  limited  means  for  assistance.^®  This  area  had  far  less 
visibility  than  New  Orleans,  but  the  victims  were  in  equally  dire  situations  with 
fewer  law  enforcement,  medical  and  relief  resources,  and  transportation  routes  to 
support  these  populations. 

The  HFN  deployment  connected  high  critical  nodes  that  had  a  direct 
impact  on  human  security  in  the  areas  affected  most  by  this  disaster  (see  Figure 
4).  This  deployment  connected  the  police  and  law  enforcement  in  the  hardest  hit 
areas  in  Bay  St.  Louis  and  Waveland,  Mississippi,  as  well  as  the  relief  distribution 
center  and  the  Hancock  Medical  Center.  In  these  ways,  the  deployments  in 
Thailand  and  Mississippi  were  highly  similar — they  occurred  in  rural  areas,  with 
serious  impact,  limited  infrastructure,  and  a  high  population  of  victims  in 
desperate  situations. 


68.  Washington  Post,  “Katrina’s  Staggering  Blow,”  Washington  Post  Editorials,  31  August 
2005,  http://www.washingtonpost.com/wp- 
dyn/content/article/2005/08/30/AR2005083001554.html. 

69.  Jacob  Wycoff,  “Flashback  to  Hurricane  Katrina... 8  Years  Ago  Today,”  WeatherBug,  29 
August  2013,  http://knowbefore.weatherbug.eom/2013/08/29/flashback-to-hurricane-katrina-8- 
years-ago-today/. 
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Figure  4.  NFS  HFN  Team’s  Katrina  Network  Infrastructure.^'' 


Due  to  the  limited  timeline  between  Thailand  and  Katrina  missions 
(7  months),  only  some  of  the  issues  previously  discovered  were  addressed. 
During  the  Katrina  deployment,  the  team  experienced  some  of  the  same 
challenges  they  did  in  Thailand.  The  primary  issue  that  resurfaced  during  this 
deployment  was  equipment  interoperability  and  durability  issues.  In  addition,  the 
changes  and  upgrades  to  the  FLAKs  brought  issues  to  the  surface. 

The  significant  issues  identified  during  the  Katrina  were  as  follows: 

•  Equipment  durability,  accountability,  and  interoperability  issues 

•  Access  to  satellite  communications  was  limited 

•  Network  security  policies  were  not  in  place 

•  Power  generation  issues 


71.  Brian  Sleekier,  “Hastily  Formed  Network  Information  Brief,”  FCC  Data  Workshop,  4 
October  201 1 ,  http://transition.fcc.gov/pshs/docs/summits/DACA/Steckler%20- 
%20FCC%20DACA%20Workshop.pdf. 
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Donated  equipment  experienced  functionality  and  durability  issues72 
Some  of  the  equipment  did  not  perform  for  the  duration  of  the  mission.  After  the 
replacements  arrived,  there  was  no  designated  method  for  maintaining 
accountability  of  the  network  equipment.'^s  Finally,  some  of  the  equipment 
donated  suffered  from  significant  interoperability  issues  when  used  in  concert 
with  products  from  other  vendors. 

Throughout  the  Katrina  deployment,  access  to  government  and 
commercial  satellites  was  limited.  Because  of  the  limited  access  to  the  satellite 
connection  points  and  shared  frequency  bands,  saturation  of  bandwidth  was  a 
constant  problem. j|-|0  absence  of  quality  control  mechanisms  resulted  in 
communications  degradation  during  peak  times. ^6 

Another  significant  issue  with  the  NFS  HFN  team  was  the  lack  of  a  multi¬ 
layered  network  security  plan.  Improper  security  procedures  and  lack  of  policies 
negated  the  ability  of  the  NFS  FIFN  team  to  manage  the  users  that  were 
connected.  The  lack  of  intrusion  detection  and  prevention  solutions  denied  the 
ability  to  monitor  traffic  on  HFN.^^ 

During  the  deployment,  the  NFS  HFN  team  was  vulnerable  to  cyber-attack 
because  the  team  did  not  implement  and  enforce  a  multi-layered  security 
solution.  The  NFS  HFN  team  experienced  an  unexplained  degradation  of 
service.  Due  to  the  partner  relations,  Mr.  Stockier  was  able  to  identify  that  the 
service  degradation  was  coming  from  an  IF  range  outside  of  the  internal  network. 
A  few  days  prior  to  being  relieved,  an  access  list  solution  provided  the  means  to 


72.  Bryan  L.  Bradford,  Steve  Urrea,  and  Brian  Sleekier,  “After  Action  Report  and  Lessons 
Learned  from  The  Naval  Postgraduate  School’s  Response  to  Hurricane  Katrina”  (master’s  thesis. 
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thwart  further  DOS  attacks/®  Due  to  the  lack  of  a  multi-layered  security  solution, 
the  NPS  HFN  experienced  a  suspected  denial  of  service  (DOS)  attack/^ 

During  natural  disasters,  the  power  grid  usually  fails  in  affected  areas.®®  It 
is  problematic  to  transport  power  generation  equipment  and  the  supporting 
materials  required  to  operate  them  to  the  disaster  area.®''  There  is  an  immediate 
need  for  self-sustaining  power  generation  capabilities. ®2 

3.  Haiti  Earthquake  Depioyment 

On  January  12,  2010,  a  7.3  magnitude  earthquake  caused  catastrophic 
damage  to  the  country  of  Haiti,  on  the  island  of  Hispaniola  (Shared  with  the 
Dominican  Republic).®®  The  devastation  that  occurred  resulted  in  over  220,000 
deaths.®^  The  damage  was  so  extensive  that  it  incapacitated  a  significant  amount 
of  the  island’s  disaster  response  capability  and  critical  infrastructure.  Larry 
Wentz,  an  observer  for  the  National  Defense  University,  published  a  trip  report 
detailing  his  observation  of  the  ICT  situation  during  the  mission.  In  his  report, 
Wentz  indicated  that  over  40  percent  of  the  government  buildings  experienced 
catastrophic  damage.®®  He  also  mentioned  that  the  earthquake  destroyed  the  UN 
headquarters  and  the  UN  command  and  communication  facilities,  killing 
approximately  150  peacekeeping  mission  members  of  the  United  Nations.®® 
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Despite  the  significant  damages,  some  of  the  cellular  and  network  infrastructure 
remained  intact.^^ 

On  January  18,  2010,  the  NPS  HFN  team  deployed  in  support  of  DR 
operations  in  Haiti. ^8  The  team  provided  advice  and  employed  their  ICT  platform 
in  support  of  the  relief  effort. ^9  The  initial  assignment  of  the  team  provided 
additional  ICT  capability  for  the  United  States  Naval  Ship  (USNS)  Comfort 
mission. 9091  The  team  was  able  to  provide  network  connectivity  to  the  locations 
in  Figure  6  using  its  Redline  WiMAX  links  and  Wi-Fi  Mesh  capability.  A  few 
weeks  later,  the  NPS  HFN  team  provided  support  for  Joint  Task  Force  (JTF) 
Haiti.  The  new  mission  of  the  team  provided  communications  for  a  variety  of 
early  responders  including  NGCs,  UN  personnel,  U.S.  government,  and  military 
entities. 92  The  NPS  HFN  team’s  mission  ended  approximately  thirty  days  after 
their  initial  deployment. 
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Figure  5.  NPS  HFN  Team’s  Haiti  Network  Infrastructure. ^3 


For  the  Haiti  mission,  the  HFN  team  was  able  to  address  issues  presented 
in  previous  AARs.  With  some  help  from  NPS  students,  the  HFN  team  developed 
an  improved  technical  solution  for  the  FLAKs.^^  The  HFN  contribution  to  the  Haiti 
DR  mission  and  international  participation  resulted  in  a  slightly  larger  scale  relief 
effort.  With  a  much  larger  relief  effort  came  a  multitude  of  different  international 
bodies  and  NGOs.  The  impact  of  more  organized,  international  DR  resulted  in  a 
completely  different  set  of  issues.  The  significant  lessons  learned  from  this  event 
are  as  follows; 

•  Information  overload 

•  Bandwidth  over-utilization  and  frequency  management  issues 

•  International  distrust  and  collaboration  issues 
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Due  to  the  losses  sustained  directly  to  its  facilities  and  workforce,  the  UN 
did  not  have  the  capability  to  lead  disaster  relief  efforts. The  lack  of  a 
contingency  disaster  mission  command  and  control  element  caused  significant 
confusion  and  fostered  a  feeling  of  anarchy. 

The  lack  of  command  and  control  (C2)  empowered  individual  mission 
teams,  using  disparate  collaboration  solutions,  to  assume  C2  of  the  mission  in 
their  respective  areas.  The  use  of  disparate  collaboration  solutions  created 
additional  confusion  and  increased  anarchy  within  the  system. ^6  Based  on 
Wentz’s  report,  there  seemed  to  be  a  distinct  feeling  of  information  overload  due 
to  the  using  disparate  collaboration  solutions. 

Throughout  the  deployment,  the  U.S.  Navy  had  the  capability  to  provide  a 
shared  common  operational  picture  (COP).  Compartmentalization  practices, 
complex  interfaces,  large  bandwidth  requirements,  lack  of  vender-to-vendor  data 
normalization,  and  social  complexity  rendered  international  access  to  the  U.S. 
Navy  COP  unattainable.  As  such,  the  notion  of  a  unified  front  for  the  DR  was  not 
possible  during  the  initial  phases  of  the  mission. 

The  absence  of  frequency  management  during  the  mission  affected 
communications  between  participating  teams. The  extraordinary  quantity  of 
satellite  phones,  BGANs,  and  VSAT  terminals  in  close  proximity  created  serious 
bandwidth  and  communications  interference  issues. The  lack  of  a  coordinated 
frequency  management  plan  resulted  saturated  bandwidth  and  degraded  service 
capabilities. Social  media  and  interfaces  were  great  assets,  but  the  mission 
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teams  lacked  the  capability  to  fully  analyze  and  mine  the  dataJ^''  Twitter, 
Facebook,  Skype,  and  other  social  media  tools  and  applications  facilitated  an 
unprecedented  amount  of  information  flow.  The  social  media  interfaces  proved 
the  most  flexible  and  useful  information  tools  for  the  victims  due  to  flexibility,  user 
familiarity,  and  ease  of  use.''°2 

The  use  of  Short  Message  Service  (SMS)''03  numbers  to  locate  people 
trapped  inside  buildings  was  an  irreplaceable  asset  to  search  and  rescue  and 
resulted  in  numerous  life-saving  rescues. The  SMS  capability  is  heavily  reliant 
on  the  availability  of  existing  critical  communications  infrastructure,  which  in 
some  cases  is  not  available  in  the  aftermath  of  a  disaster.  Fortunately,  during  the 
Haiti  relief  effort  there  were  “pockets”  of  cellular  coverage  in  the  immediate 
aftermath  of  the  earthquake,  thus  enabling  some  critical  life-saving  SMS 
traffic.  "I 


4.  Typhoon  Haiyan  Deployment 

On  November  8,  2013,  Super  Typhoon  Haiyan  made  landfall  in  the 
Philippines. Super  Typhoon  Haiyan  was  the  strongest  tropical  cyclone  to  hit 
land  in  history,  with  sustained  winds  of  over  195  miles  per  hour.'io^  As  of 
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November  22,  2013,  the  storm  claimed  the  lives  of  over  5,000  people,  was 
responsible  for  over  24,000  injuries,  and  displaced  millions  of  Filipinos. 

The  NFS  HFN  team  deployed  once  again  to  provide  communications 
infrastructure  for  disaster  relief  operations.  For  the  Typhoon  Flaiyan  relief  effort, 
the  NFS  FIFN  team  deployed  to  Tacloban,  Fhilippines.  The  NFS  FIFN  team 
served  as  ICT  advisors  to  the  3rd  Marine  Expeditionary  Brigade  by  conducting 
Rapid  Information  and  Communication  Technology  Assessment  Team 
(RTATj.'ios  During  this  deployment,  significant  capability  improvements  in  social 
media  assessment,  reporting  procedures,  and  situational  awareness  solutions 
facilitated  a  more  organized  and  succinct  mission. 


Figure  6.  NFS  FIFN  Team’s  ICT  Training  During  Typhoon  Flaiyan  Mission. 


Despite  the  added  capabilities  and  functionality,  the  operation  still  suffered 
from  technology  and  policy-based  communications  shortfalls. 
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The  initial  procedures  for  RTAT  reporting  were  manual  and  the  capability 
suffered  from  severe  compartmentalization.  When  filling  in  the  information  for  the 
RTAT  Emergency  Operations  (EMOPS)  report,  users  were  required  to  assess 
seven  primary  communications  infrastructure  criteria.  The  seven  communications 
criteria  are  electricity,  land  lines/fiber,  cellular,  satellite,  Wi-Fi  (voice  and  data), 
broadcasting  (TV/radio),  and  radio  (tactical  and  commercial  bands).  By  restricting 
participation  to  only  authorized  personnel,  the  effectiveness  of  the  reporting 
procedure  was  limited.  Enabling  trusted  members  of  the  local  government  would 
have  facilitated  faster  damage  assessments. 


The  lack  of  an  automated  solution  for  RTAT  reporting  resulted  in  manual 
submission  of  reports.  Major  Travis  Reason,  a  2014  NPS  graduate,  worked  with 
Lighthouse  software  to  develop  an  android  mobile  application  to  streamline  the 
RTAT  reporting  process. Appendix  B  provides  additional  details  on  the  RTAT 
project. 
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Figure  7.  Lighthouse  RTAT  Application  and  PDC  EMOPS  Integration.''"''' 
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COP  information  overflow  is  still  a  challenge.  Pacific  Disaster  Center 
Emergency  Operations  Center  (PDC  EMOPS)  provides  a  free  a  web  based 
secure  map  interface  (DisasterAware)  for  sharing  situational  information.'' "12 
Figure  7  illustrates  the  integration  of  the  Lighthouse  application  into  the  map 
interface  of  PDC  EMOPS  DisasterAware.  This  tool  facilitated  RTAT  report 
information  sharing  in  a  map-based  interface  during  the  Hayian  DR  mission.'' ''3 
Although  PDC  EMOPS  DisasterAware  web  interface  has  the  capability  to  provide 
COP,  no  legislation  appointed  DisasterAware  as  the  designated  COP  provider. 
This  was  similar  to  previous  deployments,  in  which  multiple  organizations 
provided  their  own  collaborative  solutions. 

The  relief  effort  continued  to  suffer  from  bandwidth  degradation  due  to 
oversaturation  of  satellite  communication  links.  As  in  the  Haiti,  the  international 
DR  mission  teams  each  provided  ICTs,  which  resulted  in  additional  congestion 
within  the  network.  Network  security  was  still  a  challenge  for  the  NPS  HFN  team 
and  others  setting  up  HFNs.  In  2004,  the  Institute  of  Electrical  and  Electronic 
Engineers  (IEEE),  a  body  of  standards  for  communications,  deemed  the  WEP 
standard  obsolete  and  replaced  the  standard  with  Wi-Fi  Protected  Access 
(WPA).''''4''''5  At  the  time  of  the  deployment,  the  NPS  provided  BGANs  only 
supported  the  outdated  and  overly  unsecured  Wired  Equivalent  Privacy  (WEP) 
standard  for  encrypting  wireless  data  and  traffic.''''® 
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In  principle  to  use  encryption  on  a  network,  all  devices  must  use  the  same 
encryption  standard.  Since  the  team’s  Hughes  9201  BGAN  only  supported  WEP 
encryption  standard,  to  interoperate  with  the  other  wireless  access  points,  the 
legacy  standard  was  required.  Use  of  obsolete  encryption  standards  allows  the 
traffic  to  be  accessible  to  potential  adversaries. 

Adding  to  the  use  of  obsolete  standards,  the  NPS  HFN  team  did  not  have 
a  plan  to  implement  a  layered  security  plan  for  its  network.  There  was  no  way  to 
monitor  the  network  or  prevent  outside  intrusions.  In  addition,  system  security, 
network  securities,  and  acceptable  use  policies  were  undefined  or  did  not  exist. 
The  lack  of  a  multi-layered  security  solution  for  the  NPS  HFN  team  left  the 
network  in  the  same  security  posture  as  it  was  in  2004.  Without  the  capability  to 
monitor  traffic,  identification  of  an  attack  was  not  possible. 

Using  social  media,  such  as  Twitter  and  Facebook,  has  proven  to  be  a 
valuable  means  of  DR  communication.'' Whether  we  continue  to  use  the 
available  commercial  social  media  tools  or  develop  a  DR  specific  social  media 
tool,  we  have  yet  to  fully  address  the  risks,  benefits,  and  capabilities  of  this 
venue. 

C.  SOLUTIONS  SUMMARY 

This  chapter  provided  examples  of  restructuring,  collaborative,  and  ICT 
solutions  implemented  to  improve  disaster  relief  efforts.  These  solutions  help  to 
reduce  the  anarchy  within  the  DR  system.  Compartmentalization,  social 
complexity,  and  the  lack  of  international  trust  form  barriers  to  open 
communication.  These  barriers  work  in  concert  with  each  other  to  increase  the 
anarchy  within  the  DR  system. 

In  addition,  it  highlighted  issues  experienced  by  the  NPS  HFN  team  during 
disaster  relief  deployments.  The  issues  identified  during  the  NPS  HFN  team’s 
deployments  are  as  follows: 
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•  Functionality  and  durability  issues 

•  Cost  of  maintaining  network  equipment 

•  HFN  fly  away  kit  (FLAK)  standard  was  not  established  or  defined 

•  Equipment  durability,  accountability,  and  interoperability  issues 

•  Access  to  satellite  communications  was  limited 

•  Network  security  policies  were  not  in  place 

•  Power  generation  issues 

•  Information  overload 

•  Bandwidth  over-utilization  and  frequency  management  issues 

•  International  distrust  and  collaboration  issues 

•  Lack  of  automated  reporting  (manual  RTAT  reports) 

•  Lack  of  social  media  integration  and  usage 

Regardless  of  the  solution  category,  all  items  presented  applied  solutions 
to  symptoms  rather  than  addressing  the  system-level  problem.  Before  providing 
a  solution  to  this  problem,  planners  must  explore  the  context  of  the  system-level 
problem  within  DR. 
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III.  WICKED  PROBLEMS  AND  SYSTEMS  THINKING 


A.  DISASTER  RELIEF  AS  A  WICKED  PROBLEM 

From  global  warming  to  refuse  disposal,  the  international  community  is 
flooded  with  complex  problems  that  exhibit  wicked  characteristics.''''®  Rittel  and 
Webber  define  a  wicked  problem  as  “complex,  ill-defined,  constantly  changing, 
involve  lots  of  stakeholders  with  conflicting  views,  and  cannot  be  solved  using 
linear  ‘system’  processes.”'' ''^ 

A  more  recent  definition  of  a  wicked  problem  comes  from  the  book  Wicked 
Problems:  Problems  Worth  Solving,  from  the  Austin  Center  for  Design  (Ac4d). 
Ac4d  defines  a  wicked  problem  as  “a  social  or  cultural  problem  that  is  difficult  or 
impossible  to  solve  for  as  many  as  four  reasons:  incomplete  or  contradictory 
knowledge,  the  number  of  people  and  opinions  involved,  the  large  economic 
burden,  and  the  interconnected  nature  of  these  problems  with  other 
problems. ”''20 

Another  advocate  of  Horst  Rittel’s  work  on  wicked  problems  was  Dr.  Jeff 
Conklin.  Dr.  Conklin’s  book  on  dialog  mapping  for  wicked  problems  proposed  a 
framework  for  identifying  wicked  problem  characteristics.  Dr.  Conklin 
summarized  Horst  Rittel’s  description  of  wicked  problem  characteristics  as  the 
following: 

•  “You  don’t  understand  the  problem  until  you  have  developed  a 
solution. 

•  Wicked  problems  have  no  stopping  rule. 

•  Solutions  to  wicked  problems  are  not  right  or  wrong. 

•  Every  wicked  problem  is  essentially  unique  and  novel. 
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•  Every  solution  to  a  wicked  problem  is  a  one  shot  operation. 

•  Wicked  problems  have  no  given  alternative  solutions. 122 

It  is  difficult  to  identify  whether  a  problem  exhibits  wicked  characteristics 
without  understanding  the  problem  context  or  problem  space.  Dr.  Conklin 
introduced  dialog  mapping  as  a  process  to  understand  context  and  identify 
complex  problems  that  possess  wicked  characteristics. The  dialog  mapping 
process  starts  with  a  question  or  problem  statement,  and  explores  all  possible 
ideas  and  solutions.  When  combined  with  Dr.  Conklin’s  dialog  mapping  process, 
Rittel’s  definition  allows  planners  to  determine  if  the  problem  exhibits 
characteristics  of  wickedness. 

The  following  DR  question  proposes  a  potential  solution  for  evaluation 
against  Rittel’s  definition  and  Dr.  Conklin’s  process,  determining  if  wicked 
problem  characteristics  are  present  in  the  system:  Which  country  or  organization 
should  be  ultimately  responsible  for  all  global  disasters  and  humanitarian  crisis 
response? 

1.  “You  Don’t  Understand  a  Problem  Until  You  Have  a 
Solution”''24 

Using  Conklin’s  process,  as  ideas  evolve  from  the  original  problem 
question  additional  supporting  questions  arise.  These  ideas  spawn  additional 
questions,  indicated  by  the  icon’s  number  in  Figure  8.  Many  times  the  additional 
questions  become  so  complex  that  they  require  their  own  dialog  map.  The 
number  of  additional  dialog  maps  created  quickly  becomes  unruly.  For  the 


121.  Jeff  Conklin,  Ph.D.,  Dialogue  Mapping:  Building  Shared  Understanding  of  Wicked 
Problems  (John  Wiley  &  Sons.  2005),  7-10. 
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proposed  question,  any  idea,  results  in  an  inconceivable  number  of  additional 

problems  that  require  consideration. ''25 


WhatcapabiKS  are 


y 

What  capabilities  are 
needed  to  be  able  to 
provide  to  support  all 
HA/DR  events? 


y 

What  should  the 
organiaational  structure 
of  HA/DR  look  like? 

,>• 

How  will  the  organization 
manage  and  distribute 
organizational  assets 
that  support  HA/DR 
efforts? 


y 

Where  would  the 
designated  organization 
be  located? 


Figure  8.  Dialog  Map  of  the  Proposed  Question. 


To  understand  the  complexity  in  Figure  8,  consider  that  there  are  currently 
192  countries  and  over  a  thousand  DR  organizations  that  have  a  stake  in  the 
question.  Each  countries’  and  organizations’  values,  morals,  desires,  and 
experiences  differ.  These  differences  result  in  organizations  providing  different 
solutions,  as  it  is  from  their  own  perspectives.  The  exploration  of  ideas  for  solving 
this  problem  identifies  additional  complexities  within  the  problem  space. 
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Furthermore,  the  complexities  identified  render  the  selection  of  a  viable  solution 
improbable. 


2.  “Wicked  Problems  Have  No  Stopping  Rule”''26 

By  looking  at  Figure  2  and  the  previous  characteristic,  it  is  difficult  to 
identify  a  distinct  stopping  point.  Shareholders  play  a  big  role  in  organizational 
decisions,  especially  in  situations  such  as  the  proposed  question.  To  appoint  an 
authoritative  organization,  all  of  the  stakeholders  must  agree  and  accept  the 
group’s  decision.  Due  to  the  quantity  of  stakeholders,  attaining  a  unanimous 
solution  is  unlikely.  Without  unanimous  approval,  an  authoritative  figure  will  not 
solve  the  problem.  If  an  authoritative  figure  is  appointed,  the  social  complexity  of 
the  stakeholders  will  act  as  barriers  to  conformity.  Because  of  this,  there  are  no 
methods  or  indicators  to  determine  when  the  solution  presented  solves  the 
problem. 

3.  “Solutions  to  Wicked  Problems  Are  Not  Right  or  Wrong”''27 

According  to  Dr.  Conklin,  problems  are  contextual  and  cannot  be  identified 
using  simple  or  complex  mathematical  equations. ''28  Nominating  a  country  or 
organization  as  the  responsible  entity  for  DR  will  differ  for  each  country  or 
organization  due  to  many  different  factors:  bureaucratic  procedures,  legal 
constraints  on  scope  or  authority,  or  local  practice,  for  example.  Stakeholders 
prefer  their  own  nominations,  while  strongly  expressing  reservations  against 
other  potential  nominees.  There  is  no  right  or  wrong  solution;  there  are  only 
differences  in  personal  preferences  and  individual  biases. 
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4.  “Every  Wicked  Problem  is  Essentially  Unique  and  Novel”''29 

Disasters  are  complex  events.  Even  a  disaster  that  is  predictable,  such  as 
the  typhoons  in  the  Philippines,  will  impact  different  stakeholders,  different 
systems,  and  have  different  outcomes.  During  the  2010  earthquake  in  Haiti,  the 
local  government  and  the  United  Nations,  infrastructure  and  personnel  were 
destroyed  or  killed  as  a  result.  This  situation  was  unique  because  the  command 
structure  for  the  response  was  completely  obliterated.  Almost  every  disaster  on 
record  presents  its  own  unique  challenges  physically,  socially,  and  logistically. 

5.  “Every  Solution  to  a  Wicked  Problem  is  a  One-Shot 

Operation”''30 

In  a  wicked  problem,  there  is  no  way  to  test  a  solution  because  every 
solution  can  have  lasting  second-order  effects,  which  can  create  additional 
problems. ''3''  In  July  2004,  the  state  of  Louisiana  hosted  a  disaster  preparedness 
exercise  known  as  Hurricane  Pam. "132  Despite  the  planning  and  coordination 
efforts  during  the  exercise,  things  did  not  go  as  planned  during  the  response  to 
Katrina. '133  The  plans  and  processes  produced  from  Hurricane  Pam  exercise  can 
serve  as  a  baseline  for  future  events.  However,  exercises  assume  specific 
conditions,  which  may  or  may  not  support  the  reality  during  actual  relief  efforts. 
The  expectation  that  disasters  and  the  relief  effort  will  occur  according  to  plan  is 
unrealistic.  As  such,  every  disaster  is  a  one  shot  operation. 


129.  Horst  W.  J.  Rittel  and  Melvin  M.  Webber,  Dilemmas  in  a  General  Theory  of  Planning 
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Committee  on  Homeland  Security  and  Governmental  Affairs,  Senate  Hearing  109-403, 
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6. 


“Wicked  Problems  Have  No  Given  Alternative  Solutions”''34 


After  action  reports  (AARs),  from  DR  events  over  the  last  decade 
exemplify  that  the  lack  of  centralized  responsibility  for  DR  operations  directly 
contributes  to  the  anarchy  within  the  system.  There  are  no  given  alternative 
solutions  to  appointing  a  responsible  entity  for  DR  missions.  The  question 
proposed  is  improperly  framed  and  does  not  allow  for  the  exploration  of  alternate 
solutions. '135  The  question  proposed  addresses  one  of  the  symptoms  of  a 
system-level  problem  within  the  DR  system. 

Based  on  the  above  comparison,  there  should  be  no  doubt  that  disaster 
relief  is  a  wicked  problem.  In  addition  to  being  a  wicked  problem,  the  complexity 
of  DR  and  its  international  impact  warrants  classification  as  a  system.  Rather 
than  classifying  DR  as  a  singular  system,  other  systems  such  as  governments, 
militaries,  nongovernmental  organizations,  and  commercial  organizations 
working  in  concert  towards  a  common  goal  constitute  a  system  of  systems.  As 
such,  it  would  be  premature  to  propose  a  solution  without  an  understanding  of 
the  interdependencies  of  the  system.  To  further  evaluate  the  interdependencies 
in  the  DR  system,  planners  must  identify  all  relational  dependencies  within  the 
DR  system. 

B.  DISASTER  RELIEF  AS  A  SYSTEM 

According  to  Dr.  Derek  Anthony  Cabrera,  systems  concepts  date  back 
2600  years,  to  Lao  Tzu’s  explanation  of  yin  and  yang. ''36  Systems  Thinking  is  not 
an  equation  to  solving  wicked  problems;  it  is  a  conceptual  framework  accessed 
to  understand  the  system  in  its  related  components. ''37  The  Systems  Thinking 

134.  Jeff  Conklin,  Ph.D.,  Dialogue  Mapping:  Building  Shared  Understanding  of  Wicked 
Problems  (John  Wiley  &  Sons.  2005),  7-10. 

135.  Virginia  Anderson  and  Lauren  Johnson,  Systems  Thinking  Basics:  From  Concepts  to 
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process  defines  and  explores  the  entire  problem  space,  properly  frames  the 
problem  within  the  problem  space,  and  enables  planners  to  deal  with  wicked 
problems.  Properly  framing  the  problem  within  the  problem  space  enables 
identification  of  the  system-level  problem.  With  the  system-level  problem 
identified,  stakeholders  can  develop  solutions  that  can  have  an  impact  on  the 
entire  system.  Many  of  the  symptoms  identified  will  be  resolved  through 
implementing  the  system-level  solution. 

A  system  is  a  group  of  independent  items  or  objects  working  in  concert 
towards  a  common  goal  or  performing  individual  actions  to  provide  a  singular 
function. The  Systems  Thinking  process  relies  on  the  following  principles: 

•  Analyzing  the  target  problem  using  a  big  picture  perspective'' 3^ 

•  Identifying  and  understanding  the  balancing  mechanisms  within  the 
system 

•  Accounting  for  the  complexities  of  dynamic,  interdependent 
systems''^'! 

•  Understanding  the  nature  and  differences  between  measurable  and 
non-measurable  entities  within  the  system''42 

•  Account  for  the  socially  complex  nature  of  human  behavior  and 
identifying  its  effect  on  the  system''43 

C.  A  SYSTEMS  PERSPECTIVE  FOR  DISASTER  RELIEF 

The  first  step  of  a  Systems  Thinking  process  is  to  define  the  problem 
using  a  succinct  narrative. The  narrative  provides  a  short,  succinct  definition  of 
the  problem  space. 
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1. 


Narrative 


The  anarchy  created  in  the  aftermath  of  a  natural  disaster  is 
uncompromising.  The  lack  of  international  legislation  and  appointed  authority 
results  in  increasing  the  level  of  anarchy  associated  with  DR.'i^s  dR  mission 
teams  provide  assistance  and  resources  for  disaster  relief  to  local  first 
responders,  governments,  and  victims. ''46  After  DR  mission  teams  arrive,  the 
social  complexity  of  the  mission  increases,  reducing  the  desire  and  capability  of 
the  mission  teams  to  participate  in  open  AO.  This  lack  of  international 
participation  in  open  4C  results  in  a  reduction  of  the  overall  quality  of  the 
response.  A  reduction  in  the  overall  response  quality  incites  additional  stress, 
thus  resulting  in  a  longer  duration  to  the  relief  mission. 

2.  Identification  of  Stakeholders 

The  identification  of  stakeholders  helps  the  planner  conceptualize  the 
social  implications  within  a  group.  The  scope  of  social  impact  is  directly 
proportional  to  stakeholder  diversity.  An  understanding  of  the  diversity  and  social 
complexity  helps  to  better  identify  the  problem  area.  The  primary  stakeholders  for 
DR  are  foreign  countries,  the  UN,  nongovernmental  organizations  (NGOs),  local 
governments,  and  the  victims. 

D.  VARIABLE  IDENTIFICATION 

The  second  step  in  the  Systems  Thinking  process  is  to  identify  and  name 
the  primary  measurable  and  non-measurable  variables. The  book  Systems 
Thinking  Basics:  From  Concepts  to  Causal  Loops  defines  variables  as 
components  of  the  problem  that  can  vary  over  time.  Table  1  illustrates  the 
redefined  variables  for  the  disaster  relief  system.  The  steps  for  identification  of 
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146.  Brian  Sleekier,  Hastily  Formed  Networks  in  Haiti,  “Haiti  Earthquake  After  Action  Report 
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2010). 
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variables  are  identification,  consolidate,  eliminate,  redefine,  and  verify-^^s 
Appendix  A  contains  all  steps  in  the  Systems  Thinking  process. 


Table  1 .  The  Redefined  Variables  for  Disaster  Relief. 


Variables 

Redefining  Variables 

Scope  of  the  Disaster 

The  degree  of  damage  and  level  of  impact  that  the 
physical  and  emotional  damage  have  on  the  victims 
of  the  disaster.  The  actions  of  all  stakeholders  and 
victims  affect  the  speed  and  efficiency  of  recovery 
operations. 

Number  of  DR  Mission 
Teams 

Contingent  upon  severity  of  incident.  The  number  of 
DR  mission  teams  and  capability  required  facilitating 
an  efficient  and  effective  relief. 

Response  Quality 

The  overall  quality  of  service  provided  by  the  mission 
teams  combined. 

Anarchy 

Ultimate  state  of  disorder,  uncertainty,  instability, 
insecurity,  and  identification  of  leadership. 

Social  Complexity 

Humans  tend  to  react  in  a  certain  manner  based  on 
their  individual  experiences,  beliefs,  morals,  and 
values.  These  reactions  are  also  based  upon  the 
norms,  values,  and  belief  systems  of  their  country, 
state,  city,  and  origin. 

Stress 

Level  of  stress  associated  with  DR.  This  includes  all 
stakeholders. 

E.  PROPERLY  DEPICT  THE  PROBLEM  SPACE 

The  next  step  in  the  Systems  Thinking  process  is  to  properly  depict  the 
problem  space.  In  order  to  properly  depict  the  problem  space,  three  products 
must  be  generated  and  analyzed.  These  products  are  a  timeline,  a  behavior  over 
time  (BoT)  chart,  and  the  initial  causal  loop  diagram  (CLD).''49  The  results  from 
AARs,  academic  research,  narratives,  and  redefined  variables  facilitate  creation 
of  these  products. 
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1. 


Timeline  Generation 


The  timeline  bridges  the  gap  between  the  narrative,  the  variables,  and  the 
products  created  later  in  the  process. The  timeline  encourages  the  planner  to 
define  the  system  processes.  The  processes  discovered  form  a  graphical 
depiction  of  DR  efforts.  An  investigation  into  deployments  and  AARs  indicate  that 
the  measurable  baseline  for  a  DR  mission  set  is  between  zero  and  thirty  days. 

Prior  to  a  disaster,  some  organizations  participate  in  4C  activities  with 
designated  trusted  parties.  Most  of  the  4C  activities  are  in  the  form  of  standard 
operating  procedure  development,  disaster  response  planning,  and  pre-disaster 
exercises. "1 51  In  some  cases,  there  are  no  pre-disaster  4C  interactions  between 
stakeholders.  The  best  scenario  is  to  assume  little  to  no  international  4C  has 
taken  place  prior  to  a  DR  event.  Based  on  this  assessment,  the  timeline  covers 
the  first  thirty-one  days  of  the  event.  Figure  9  illustrates  an  example  timeline  for 
DR  mission  set. 


150.  Nancy  Roberts,  Naval  Postgraduate  School,  “Coping  with  Wicked  Problems”  Classroom 
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(Washington,  DC:  U.S.  Government  Printing  Office.  15  February  2006). 


44 


HA/DR  response  timeline 


Disaster  occurs 


Local  Population 
Devastated 
Available  Local 
rescue  services 
respond. 

Search  and  rescue 
begins. 


First  HA/DR  teams 
arrive. 

Initial/temporary 
communications 
networks  in  place  by 
day  S. 

Basic  necessities  are 
on  site.  Distribution 
to  most  areas 
remain  a  problem. 

.  Air  and  water  based 
search  and  rescue 
improves  to  remote 
areas. 


More  HA/DR  teams 
arrive. 

Networking 
capability  extended. 

Some  collaboration 
occurs. 

Maneuverability  is 
still  impaired. 

Search  and  rescue 
efforts  are 
increased. 


Rotation  of  teams 
Bandwidth  Limited 
and  Constrained. 
Heavy  equipment 
support  arrives. 

Collaboration 
capability  improves 
but  significantly 
distributed 


Maneuverability 
increases  Efforts 
consolidated. 
Remote  areas  begin 
to  receive  aid  and 
supplies. 

Social  Complexity 
and  Anarchy  reduces 
but  remain  high 

Quality  of  service 
improves. 


Figure  9.  Timeline  for  Disaster  Relief  Mission  Set. ''52 


2.  Behavior  Over  Time  Chart 

The  behavior  over  time  (BoT)  chart  provides  the  opportunity  to  examine 
each  of  the  variables  within  the  problem  space  and  identify  patterns. "'53  Once 
patterns  are  established,  the  assessment  of  the  BoT  enables  the  creation  of  the 
initial  causal  loop  diagram  (CLD).''54  Figure  10  depicts  the  behavior  over  time 
(BoT)  chart. 
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HA/DR  Behavior  Over  Time  Chart 
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Figure  10.  Disaster  Relief  Variable  Relationship  over  Time.'iss 

The  initial  assessment  of  Figure  10  shows  that  the  variables  of  the  number 
of  DR  mission  teams,  social  complexity,  and  response  quality  exhibit  an 
opposing  relationship  with  the  scope  of  disaster,  stress,  and  anarchy.  It  appears 
that  as  the  number  of  DR  mission  teams  increase,  response  quality  increases  but 
not  at  the  same  rate  as  expected.  By  increasing  the  number  of  DR  mission 
teams,  anarchy  and  social  complexity  increase.  Increases  in  anarchy  and  social 
complexity  reduce  response  quality.  Adding  to  the  anarchy  within  the  system,  the 
increase  of  social  complexity  reduces  the  desire  of  the  teams  to  participate  in 
open  4C  activities. 

The  final  assessment  of  Figure  10  warrants  a  discussion  of  the  impact  of 
the  variables  on  the  system  as  a  whole.  Because  of  system  interdependencies, 
applying  a  solution  to  one  variable  may  not  produce  a  significant  change  at  the 
system  level.  However,  if  a  proposed  solution  influences  more  than  one  variable 
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in  the  system,  the  outcome  could  potentially  solve  the  problem.  For  instance,  if 
the  proposed  solution  reduces  social  complexity  and  anarchy  within  the  system, 
the  scope  of  the  disaster  and  its  duration  could  significantly  reduce. 

3.  Initial  Causal  Loop  Diagram 

The  causal  loop  diagram  (CLD)  graphically  illustrates  the  problem  area. "'56 
The  CLD  also  defines  the  relationships  between  the  variables.  Figure  1 1  depicts 
the  initial  DR  CLD. 


S-  Same  =lncrease  or  decrease  in  one  variable  causes  the  same 
reaction  with  its  neighbor. 

O-  Opposite  =  Increase  or  decrease  in  one  variable  induces  an  opposite 
reaction  with  its  neighbor. 


Figure  1 1 .  The  Initial  Disaster  Relief  Causal  Loop  Diagram. 157 
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а.  Initial  Disaster  Relief  Causal  Loop  Diagram  Flow 

The  flow  of  the  diagram  moves  in  a  clockwise  motion.  The  diagram  flow 
reads  as  follows: 

1 .  A  disaster  occurs  resulting  in  catastrophic  damage  to  the  affected 
area.  The  damage  to  the  affected  area  determines  the  initial  scope 
of  the  disaster. 

2.  As  the  initial  scope  of  the  disaster  increases,  the  number  of  DR 
mission  teams  required  increases. 

3.  As  the  number  of  DR  mission  teams  required  increases,  the  level  of 
social  complexity  increases. 

4.  As  the  level  of  social  complexity  increases,  level  of  information 
anarchy  increases. 

5.  As  the  level  of  information  anarchy  increases,  the  level  of  response 
quality  decreases. 

б.  As  the  level  of  response  quality  decreases,  the  level  of  overall 
stress  increases. 

7.  As  the  level  of  overall  stress  increases,  the  scope  of  the  disaster 
increases. 

8.  As  the  scope  of  the  disaster  increases,  the  number  of  DR  mission 
teams  required  increases. 

9.  As  the  number  of  DR  mission  teams  required  increases,  the  level  of 
social  complexity  increases. 

10.  As  the  level  of  social  complexity  increases,  the  level  of  anarchy 
increases. 

The  relationships  between  each  of  the  variables  within  the  CLD  determine 
the  system  model  assigned  to  the  causal  loop  and  the  problem  space. "iss  The 
CLD  system  model  is  one  of  the  best  indicators  of  determining  when  a  system- 
level  problem  exists.  In  some  cases,  assessing  the  CLD  will  change  the  planner’s 
perception  of  the  problem. 

Examining  the  system  model  facilitates  a  more  thorough  understanding  of 
the  entire  system.  This  enables  the  planner  to  properly  frame  the  problem 
statement  within  the  problem  space. 


158.  Ibid.,  52-73. 
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The  system  model  can  be  determined  by  counting  the  number  of  opposite 
relationships  in  the  CLD.'iso  0ven  number  of  opposite  relationships  identify  the 
loop  as  reinforcing,  and  an  odd  number  of  opposite  relationships  indicate  a 
balancing  loopJ®''  Reinforcing  loops  represent  systems  that  remain  in  a  vicious, 
unrelenting  cycle;''62  whereas,  balancing  loops  inject  measures  to  tame  vicious 
uncompromising  system  cycles. 

An  assessment  of  the  CLD  for  DR  represents  a  reinforcing  loop  and  is 
destined  to  remain  in  an  uncompromising  cycle. The  results  of  the  CLD 
confirm  that  a  system-level  problem  within  DR  exists.  Reinforcing  loops  require  a 
balancing  mechanism  to  break  the  cycle.  To  apply  a  balancing  mechanism,  the 
planner  must  identify  the  system-level  problem  variable.  The  system-level 
problem  variable  will  serve  as  the  balancing  solution  injection  point. 

b.  Determining  the  System  Levei  Probiem  Variabie 

One  way  to  determine  the  system-level  problem  variable  is  by  identifying 
the  negative  variables  of  the  system.  These  variables  negatively  impact  the 
system  and  exhibit  a  distinct  opposite  relationship  with  their  direct  neighbors. 
Because  system  variables  are  interdependent,  this  process  can  indicate  multiple 
system-level  problem  variables.  The  planner  must  establish  a  system  for 
differentiating  between  potential  system-level  variables. 

One  method  to  differentiate  between  system-level  problem  variables  is  to 
modify  the  level  of  the  opposing  variables  and  renegotiate  the  CLD. 
Renegotiating  the  CLD  reveals  the  nature  (positive  or  negative)  of  each  variable. 
If  reducing  the  variable  helps  to  improve  the  system,  then  it  is  representative  of  a 
likely  system-level  problem  variable.  If  reducing  the  variable  has  a  negative  effect 
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on  the  system,  then  it  is  not  the  system-level  problem  variable.  The  variable  that 
imposes  the  greatest  negative  impact  on  the  system  is  the  system-level  problem 
variable. 

Within  the  DR  CLD,  there  are  six  variables.  Three  of  the  variables  have 
opposing  (O)  relationships  with  their  immediate  neighbors.  These  variables  are 
response  quality,  stress,  and  information  anarchy. 

1 .  A  reduction  of  response  quality  reflects  negatively  on  the  system. 
Response  quality  is  not  the  system-level  problem  variable. 

2.  A  reduction  in  system-level  stress  would  have  a  positive  effect  on 
the  system.  An  increase  in  system-level  stress  has  a  negative 
effect  on  the  system.  Stress  is  a  candidate  for  the  system-level 
problem  variable. 

3.  A  reduction  in  information  anarchy  would  have  a  positive  effect  on 
the  system.  An  increase  in  information  anarchy  has  a  negative 
effect  on  the  system.  Information  anarchy  is  also  a  candidate  for 
the  system-level  problem  variable. 

To  distinguish  the  system-level  problem  variable  from  the  remaining 
variables,  a  system  impact  assessment  is  required.  If  the  stress  within  the 
system  is  reduced,  the  scope  of  the  disaster  is  reduced,  but  not  to  such  a  point 
that  it  would  take  away  from  the  physical  attributes  of  the  disaster.  By  the 
definition  in  Table  2,  a  reduction  in  anarchy  would  increase  the  order  and 
organization  for  the  DR  mission.  Furthermore,  a  reduction  of  information  anarchy 
increases  the  response  quality  and  reduces  the  stress  that  occurs  because  of  the 
catastrophe.  When  actors  have  equal  access  to  critical  information  and  share 
information  appropriately,  this  leads  to  better  coordination,  cooperation,  and 
collaboration,  thus  reducing  the  anarchic  aspects  of  the  on-the-ground  response 
among  parties  with  similar  goals  and  objectives. 

4.  Properly  Frame  the  Problem 

With  the  system-level  problem  variable  identified,  the  planner  can  develop 
a  problem  statement  that  accurately  reflects  the  problem  space.  The  system- 
level  problem  statement  is  as  follows: 
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The  lack  of  information  sharing,  stress,  and  social  complexity  present 
within  the  DR  system  breed  chaos  and  severely  reduce  the  mission  teams’  ability 
to  effectively  communicate,  coordinate,  cooperate,  and  collaborate  (4C).  This 
leads  to  anarchic  tendencies  and  confusion  among  DR  participants.  Whatever 
central  or  leading  authority  may  exist,  this  confusion  and  lack  of  communication 
are  likely  to  further  undermine  it.  Reduced  4C  during  DR  missions  diminishes  the 
quality  of  the  relief,  increases  the  duration  of  the  relief  effort,  and  presents  an 
unsynchronized,  disjointed  front.  The  lack  of  a  unified  front  for  DR  missions 
increases  the  disjointedness  and  confusion  in  response,  leading  to  anarchic 
situations  that  can  result  in  preventable  post-disaster  damage,  injuries,  and  loss 
of  life. 


5.  Injection  Point  and  Validation 

Injection  points  are  created  to  show  a  vector  within  a  systems  model 
where  a  balancing  solution  could  break  the  vicious  cycle. "iss  From  a  DR 
perspective,  it  would  be  difficult  to  implement  a  solution  directly  to  negative 
system-level  variables.  A  significant  increase  in  response  quality  would  be 
difficult  without  added  capabilities  from  DR  mission  teams. 

Some  of  the  previously  discussed  solutions  focus  on  establishing  a 
network  connection  to  facilitate  4C  activities.  For  the  DR  system  model,  previous 
solution  attributes  reside  within  the  variable  number  of  mission  teams.  As  such, 
the  number  of  mission  teams  represents  the  preliminary  injection  point. 

ICT  solutions  provide  responders  with  a  means  to  participate  in  4C.  ICT 
solutions  provide  additional  capability  for  their  individual  areas.  If  a 
communication  strategy  combines  ICT  capability  with  open  4C  interface,  the 
impact  produced  by  the  variable  number  of  mission  teams  may  potentially  add  a 
balancing  structure  to  the  existing  reinforcing  loop.  As  such,  the  number  of 
mission  teams  represents  a  valid  injection  point  into  the  system. 


165.  Ibid.,  65-73. 
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The  next  step  identifies  and  defines  the  balancing  loop  variables. "'s®  The 
author’s  research  shows  that  organizational  restructuring,  ICT  solutions,  and 
collaboration  platforms  introduce  mechanisms  to  facilitate  4C  and  reduce 
anarchy  within  the  DR  system.  A  reduction  in  information  anarchy  may  be 
possible  if  a  solution  was  to  incorporate  organizational  structure,  a 
communication  enabler,  and  an  internationally  accepted  4C  interface.  By 
definition,  the  communication,  coordination,  cooperation,  and  collaboration 
variables  synchronize  relief  efforts  and  help  to  present  a  unified  front  for  DR 
missions.  Thus,  the  variables  that  make  up  4C  represent  likely  variables  for  a 
balancing  function.  Table  2  defines  the  balancing  loop  variables. 


Table  2.  The  Balancing  Loop  Variables  for  Disaster  Relief. 


Balancing  Variables 

Definitions 

Communications 

The  communications  variable  encompasses  all 
forms  of  communication.  This  includes  verbal, 
written,  signaled,  and  electronic  communication 
methods. 

Coordination 

The  coordination  variable  encompasses,  organizing 
efforts  between  disparate  groups,  in  preparation  for 
participation  in  an  activity.  Coordination  works  to 
prevent  individual  or  group  actions  from  interfering 
with  the  actions  of  other  individuals  and  groups. 

Cooperation 

Cooperation  encompasses  coordination  on  a  larger 
scale  and  occurs  when  organizations  work  together 
for  a  common  beneficial  outcome. 

Collaboration 

Collaboration  encompasses  the  act  of  organizations 
working  together  and  sharing  information  in  order  to 
generate  a  product  or  system.  The  product  or 
system  modifies,  improves,  or  changes  an  existing 
system  or  process.  Collaboration  can  also  facilitate 
the  creation  of  a  new  system. 

166.  Ibid.,  58-73. 
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With  defined  variables,  the  balancing  loop  is  ready  for  insertion  into  the 
final  CLDJSt  pue  to  the  changes  in  the  DR  CLD,  it  is  necessary  to  reassess  the 
flow  and  test  the  CLD  diagram.  Assessing  the  CLD  flow,  verifies  whether  the 
added  variables  maintain  a  balancing  effect.'i^s  Figure  12  illustrates  the  final  DR 
CLD. 

F.  FINAL  DISASTER  RELIEF  CAUSAL  LOOP  DIAGRAM 


S-  Same  =lncrease  or  decrease  in  one  variable  causes  the  same 
reaction  with  its  neighbor. 

O-  Opposite  =  Increase  or  decrease  in  one  variable  induces  an  opposite 
reaction  with  its  neighbor. 

Figure  12.  Final  Disaster  Relief  Causal  Loop  Diagram. 


167.  Nancy  Roberts,  Naval  Postgraduate  School,  “Coping  with  Wicked  Problems”  Classroom 
Instruction  (Monterey,  CA,  22  September-18  December  2014). 

168.  Virginia  Anderson  and  Lauren  Johnson,  Systems  Thinking  Basics:  From  Concepts  to 
Causai  Loops  (Waltham,  MA:  Pegasus  Communications,  1997),  58-73. 

169.  Ibid. 
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The  final  CLD  flow  is  as  follows: 


1 .  A  disaster  occurs  resulting  in  catastrophic  damage  to  the  affected 
area.  The  damage  to  the  affected  area  determines  the  initial  scope 
of  the  disaster. 

2.  As  the  initial  scope  of  the  disaster  increases,  the  number  of  DR 
mission  teams  required  increases. 

3.  As  the  number  of  DR  mission  teams  required  increases,  the 
communication  capability  level  increases. 

4.  As  the  communication  capability  level  increases,  the  level  of 
coordination  increases. 

5.  As  the  level  of  coordination  increases,  the  level  of  cooperation 
increases. 

6.  As  the  level  of  cooperation  increases,  the  level  of  collaboration 
increases. 

7.  As  the  level  of  collaboration  increases,  the  level  of  information 
anarchy  deceases. 

8.  As  the  level  of  information  anarchy  decreases,  the  level  of 
response  quality  increases. 

9.  As  the  level  of  response  quality  increases,  overall  stress 
decreases. 

10.  As  overall  stress  decreases,  the  scope  of  the  disaster  decreases. 

11.  As  the  scope  of  the  disaster  decreases,  the  number  of  DR  mission 
teams  required  decreases. 

12.  As  the  number  of  DR  mission  teams  required  decreases,  the  level 
of  social  complexity  decreases. 

13.  As  the  social  complexity  decreases,  the  level  of  general  anarchy 
decreases. 


Individually,  any  of  the  4C  variables  could  maintain  an  opposing 
relationship  with  social  complexity  and  anarchy.  However,  combining  the  4C 
variables  adds  structure  and  organization  to  the  system.  Combining  the  variables 
could  potentially  facilitate  establishing  a  unified  front  for  DR  missions.  An 
internationally  embraced  communications  strategy,  combining  a  connection 
capability  with  an  interface  for  4C,  could  potentially  decrease  anarchy  and  tame 
the  vicious  cycle  within  the  DR  system. 
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IV.  A  COMMUNICATION  STRATEGY  FOR  DISASTER  RELIEF 


The  purpose  of  this  chapter  is  to  provide  design  suggestions  and  concept 
prototypes  that  specifically  address  the  issues  within  DR  from  a  systems 
perspective.  Previously  implemented  collaboration  solutions  have  failed  to  obtain 
international  acceptance  because  business  models  or  implementation  methods 
did  not  address  social  complexity  challenges  within  the  DR  system.  The  ideas 
and  concepts  from  previous  solutions  are  decent;  however,  the  traditional  models 
of  ownership,  management,  and  administration  do  not  fit  into  the  DR  system. 
Why  do  collaborative  solution  providers  continuously  embrace  traditional 
(hierarchically-oriented)  models  of  implementation,  given  the  resistance  of  many 
critical  actors? 

Instead  of  working  together  to  develop  a  single  communications  strategy 
concept,  vendors  create  competing  solutions,  further  adding  to  information 
fragmentation.  As  an  international  body,  DR  responders  and  their  respective 
vendors  may  need  to  reassess  their  priorities. 

As  identified  in  Chapter  III,  DR  is  a  wicked  problem.  No  singular  solution, 
developed  independently,  will  solve  a  system-level  wicked  problem.  An 
internationally  accepted  communications  strategy  can  only  provide  some 
measure  of  reprieve  to  the  system.  The  concepts  in  this  chapter  provide  a 
foundation  for  addressing  the  problems  within  DR  from  a  systems-level 
approach.  These  concepts  represent  a  means  to  inspire  the  international  DR 
community  to  begin  the  development  of  a  common  4C  interface.  To  overcome 
the  anarchy  and  social  complexity  impact  on  DR  missions,  the  international 
community  should  consider  the  design  suggestions  and  prototype  concepts  in 
this  chapter. 

A.  TRUSTED  ORGANIZATION  FOR  INTEGRATION  MANAGEMENT 

As  discussed,  social  complexity  leads  to  a  vicious  cycle  where  actors  do 
not  communicate  effectively,  cannot  get  a  full  understanding  of  the  situation,  and 
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thus,  they  cannot  coordinate  or  collaborate  effectively. This  means  they  are 
less  likely  to  cooperate  with  one  another,  because  cooperation  involves  exposing 
their  operations  to  greater  risks — risks  of  blame  for  failure  and  errors,  risks  of 
having  their  productivity  and  success  attributed  to  others,  and  other  problems.''^'' 
Developing  a  concept  that  does  not  address  social  implications  of  the  system 
would  be  counterproductive  to  effective  4C  and  would  likely  fail. 

DR  stakeholders  have  their  own  agendas,  biases,  and  social  complexity 
issues.  As  such,  designating  an  existing  DR  entity  or  4C  solution  provider  as 
manager  and  service  provider  for  the  integration  interface  may  prove  difficult.  To 
alleviate  preconceived  biases  and  social  issues  between  DR  mission  entities,  the 
creation  of  a  trusted  third-party  organization  may  present  a  viable  alternative 
solution  for  inspiring  open  and  transparent  4C  for  DR. 

In  concert  with  the  previous  statement,  a  fundamental  step  for  developing 
this  communication  strategy  is  appointing  or  establishing  a  trusted  organization. 
The  trusted  organization  would  provide  the  following  three  functions: 
1)  Integration  application  development  and  testing;  2)  Interface  development, 
management,  and  administration;  and  3)  Community  development  and 
international  relations.  In  addition,  the  new  organization  can  assist  with  partner- 
to-partner  negotiations.  The  new  organization  addresses  some  of  the  social 
issues  within  DR  using  modular  measures. 

Modular  measures  for  this  strategy  involve  the  development  of  custom 
packaged  interfaces  for  individual  DR  stakeholder  organizations.  These  interface 
modules  create  a  stakeholder-specific  private  community  for  its  organizations. 
Private  community  design  enables  regional  governments  and  organizations  to 
have  their  own  personal  space  for  4C  within  their  respective  countries  or 
organizations.  Information,  resident  and  shared  within  the  private  communities,  is 
restricted  to  the  community  and  specified  community  partners.  The  custom 


170.  Rebecca  Goolsby,  telephone  call  with  author,  5  March  2015. 

171.  Ibid. 
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packaged  interface  design  enables  pre-disaster  partnerships  between 
stakeholders  through  custom  memorandums  of  understanding  (MOUs)  and 
service  level  agreements  (SLAs). 

MOUs  establish  the  informal  terms  of  understanding  between  two  private 
communities.  The  SLA  is  a  document  created  by  the  trusted  third-party 
organization;  it  contains  an  overview  and  implementation  specifications  based  on 
the  MOU.  A  signed  SLA  allows  a  temporary  merge  of  operational  interfaces  for 
the  purposes  of  a  single  DR  mission.  This  includes,  but  is  not  limited  to,  common 
interface  tools,  use  of  common  DR  information,  and  the  creation  of  disaster 
response  plans. 

B.  COMMUNICATION  STRATEGY  CONCEPTS 

The  DR  communication  strategy  does  not  create  new  or  novel 
technologies;  rather,  it  is  an  integration  of  existing  technology  into  a  usable  and 
functional  solution.  This  approach  uses  ICT  capability  to  provide  a  connection  to 
an  integration  interface.  The  strategy  creates  or  appoints  a  trusted  organization 
to  manage  custom  packaged  interfaces.  The  custom  packaged  common 
interface  is  where  the  international  community,  local  governments,  NGOs,  and 
commercial  DR  organizations  can  interact  within  their  own  organizational 
communities.  Custom  packaged  interfaces  also  enable  integration  of  existing  DR 
tools  and  solutions  such  as  Dropbox,  Skype,  APAN,  Jabber,  Inrelief,  and 
DisasterAware. 

In  the  event  of  a  disaster,  the  communities  could  come  together  to  share  a 
common  interface  through  integration  and  data  normalization.  Community 
integration  allows  the  local  government  to  maintain  command  and  control  (C2) 
while  seamlessly  presenting  a  unified  front  for  International  DR  missions.  Figure 
13  presents  the  disaster  relief  conceptual  model.  Integration  and  data 
normalization  occurs  through  application  development.  These  applications 
provide  translation  services,  so  that  common  information  converts  appropriately 
into  the  private  community  interface  format. 
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Disaster  Relief  Conceptual 
Model 


L 


Trusted  3"*  Party  Organization 


Private  Community 
Interface 


Figure  13.  Disaster  Relief  Conceptual  Model. 


1.  Providing  a  Connection 

Communication  in  austere  environments,  with  limited  resources,  requires 

the  responder  to  have  all  necessary  elements  on  hand  when  responding  to  a 

disaster.  The  selection  of  an  ideal  ICT  system  is  contingent  on  many  different 
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factors,  but  the  most  pertinent  are  finding  a  highly  deployable,  inexpensive,  and 
secure  communication  system  with  scalable  levels  of  service.  Highly  deployable 
indicates  that  ICT  systems  must  be  capable  of  deploying  to  the  disaster  area  on 
very  short  notice.  Inexpensive  and  affordable  are  acceptable  goals.  However, 
cost  is  relative  to  required  bandwidth  and  user  support  requirements.  The 
package  examples  below  have  varying  levels  of  cost,  based  on  purpose  and 
bandwidth  requirements.  Although  availability  and  integrity  are  the  focus,  the 
focus  does  not  dismiss  the  need  for  security.  A  communications  strategy  should 
show  a  balance  between  information  sharing  and  security. ''^2  j|-|e  requirements 
for  security  increase  in  proportion  to  the  size  of  the  organization,  functions,  and 
ICT  package  chosen. 

Organizations  and  mission  teams  vary  throughout  the  DR  community.  As 
these  teams  refine  their  roles  and  desired  capabilities,  bandwidth  requirements 
vary.  To  ensure  scalable  levels  of  service,  the  easiest  approach  is  to  introduce 
packages  for  varying  organizational  needs. 

2.  Information  and  Communications  Technoiogy  Soiution 
Concept 

This  section  explores  the  capabilities  of  three  median-level  packages.  The 
following  characteristics  of  the  three  packages  are  as  follows:  deployability,  cost, 
and  security.  Figure  14  provides  a  conceptual  diagram  of  the  three  package 
categories. 


172.  Larry  Wentz,  “An  ICT  Primer:  Information  and  Communication  Technoiogies  for  Civii- 
Miiitary  Coordination  in  Disaster  Reiief  and  Stabiiization  and  Reconstruction,”  Center  for 
Technology  and  National  Security  Policy  (National  Defense  University,  Washington,  DC.  June 
2006),  p.51. 


59 


ICT  Solution  Options 


ICT  Mobile 


Sat  Phone  W/  PAN 


Designed  by: 

Eric  Michael  Folsom 
and  Brooks  King 
5/25/14 

Updated  12/9/14 


■Q  * 


PDAs  +  Tabiets 
+  Apps 


/  / 

Alt  Power 
Sources 

I  1/ 


ICT  Lite 


BGAN 


Limited 

WIFI 


/ 

7 

Alt  Power 
Sources 

7 

PDAs  +  Tablets 
+  Apps 


Laptops 
+  Apps 


ICT  Standard-  Based  on  HFN 


Meshed  WIFI/ 
WIMAX 


2 _ 71 

Alt  Power 
Sources 

J 

PDAs  +  Tablets 
+  Apps 


Laptops  -I-  Apps 


Radio 

(UHFA/HF/HF) 


Cellular^ 


Figure  14.  ICT  Package  Options. 


a.  ICT  Mobile 

ICT  Mobile  packages  provide  the  least  amount  of  bandwidth,  are  highly 
deployable,  and  are  inexpensive.  Their  size  and  cost  make  them  an  ideal  choice 
for  contingency  communications.  If  ICT  Mobile  is  the  desired  solution,  teams 


173.  Folsom,  Eric  and  Brooks  King,  ICT  Packages  Concept,  HFN  Class  Project,  June  2014. 
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should  work  with  ICT  providers  to  develop  methods  to  encrypt  data-in-transit  and 
at  rest. 

A  median  solution  identified  for  ICT  Mobile  is  using  a  Delorme  inReach 
Explorer  Extreme. jhe  inReach  has  the  capability  to  send  text  messages  of  up 
to  160  characters  in  each  text.  In  the  current  configuration,  the  device  sends  a 
message  to  Delorme.  If  coordinated  in  advance,  Delorme  could  forward  all 
messages  from  specified  devices  to  a  designated  phone  number  or  individual. 
This  allows  for  position  reporting,  status  updates,  and  resource  request. 

Use  of  this  system  would  be  perfect  for  prepositioning  in  places  like 
hospitals,  fire  departments,  and  police  stations  in  countries  or  areas  that  are 
prone  to  a  disaster.  There  is  also  the  potential  to  develop  an  application  that 
allows  the  device  to  access  metadata  from  a  map  source;  this  potentially 
facilitates  access  to  a  common  operational  picture  and  serves  as  a  guide  to 
obtaining  the  assistance  required. 

The  baseline  package  for  Delorme  inReach  with  unlimited  text  messaging 
is  approximately  $499.95  +  shipping  and  $1200  per  year  for  service. Delorme 
inReach  uses  the  GPS  frequency  bands  (LI  and  L2).  The  use  of  GPS 
communications  reduces  the  impact  on  L  Band  (BGAN)  devices.  GPS  accesses 
a  different  frequency  range  and  uses  different  satellites  for  communications.''^® 
Figure  15  is  a  picture  of  the  Delorme  inReach  Explorer. 


174.  Delorme,  “Delorme  inReach  Explorer  Extreme,”  Delorme  website,  accessed  14 
December  2014,  http://www.inreachdelorme.com/product-info/inreach-explorer-extreme- 
communication-kit.php. 

175.  Ibid. 

176.  Lonnie  Wilson,  Ph.D.,  Naval  Postgraduate  School  Professor,  email  message  to  author, 
12  December  2014. 
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inReach  Explorer  Extreme  Communication  Kit 

Communicate  from  anprhere,  on  the  grid  or  off,  with  inReach  Explorer  Extreme  Communication  Kit. 
Includes  inReach  Explorer,  Goal  Zero  Nomad  7  Solar  Panel,  Goal  Zero  Switch  8  Recharger,  and  Black 
inReach  Protective  &  Flotation  Case. 

Holiday  Special:  $50  Rebate  &  One  Month  Free  Airtime  debate  Details 


□  □ 


Navigate,  create  waypoints,  log  your  trip  and 
find  your  way  back.  Send  and  receive  text 
messages.  Trigger  an  interactive  SOS.  Plan, 
track  and  share  your  journey.  You  can  do  all  of 
this  from  one  rugged  handheld  device  with 
100%  global  coverage  from  Iridium.  You  can 
also  pair  it  with  your  mobile  device  to  access 
topographic  maps  and  U.S.  NOAA  charts. 

This  item  is  eligible  for 
free  standard  U.S.  shipping. 

Regular  Price:  $479.95 


PURCHASE  » 


Due  to  high  demand  please  allow  an  extra 
1  business  day  for  standard  delivery. 


Figure  15.  Delorme  inReach  Explorer  Extreme. 


b.  ICTLite 

ICT  Lite  packages  deliver  more  bandwidth  to  the  customer.  The  baseline 
package  for  ICT  Lite  consists  of  a  Broadband  Global  Area  Network  (BGAN),  an 
alternate  power  source,  laptop  computers,  and  mobile  devices.  This  package 
allows  for  the  implementation  of  an  IEEE  802.11  wireless  network  and  can 
concurrently  support  up  to  eleven  users  depending  on  their  usage  of  the 
bandwidth.  More  than  eleven  users  would  require  the  purchase  of  a  wireless 
router.  BGAN  is  capable  of  speeds  up  to  490  Kbps.''^^ 


177.  Delorme,  “Delorme  inReach  Explorer  Extreme,”  Delorme  website,  accessed  14 
December  2014,  http://www.inreachdelorme.com/product-info/inreach-explorer-extreme- 
communication-kit.php. 

178.  Network  Innovations,  “BGAN  or  VSAT  Comparing  Technologies,”  26  April  2012. 
accessed  14  December  2014,  http://www.networkinv.com/bgan-or-vsat-comparing-the- 
technologies/. 
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A  BGAN  system  is  still  highly  deployable.  BGANs  are  airline  transportable 
and  are  small  enough  to  fit  into  carry-on  bags.  ICT  Lite  packages  are  much  more 
expensive  than  ICT  Mobile  packages,  but  offer  significantly  more  capability  for 
DR  mission  teams.  Most  ICT  Lite  solutions  come  with  embedded  security 
features.  DR  mission  teams  should  closely  examine  each  providers  BGAN 
solution  to  ensure  that  vendor  default  encryption  and  other  security  controls  do 
not  rely  on  obsolete  security  standards. 

A  median  package  for  ICT  Lite  could  be  a  Hughes  9201  BGAN  Satellite 
Terminal  for  approximately  $3000. The  annual  service  plan  is  based  on  price 
per  megabyte.  A  median  price  range  is  500  MB  for  approximately  $3000  per 
year. "ISO  The  estimate  for  the  entire  package  is  roughly  $5,500  for  the  equipment 
and  1  year  of  service.  Then  for  continued  service,  it  is  $2,499  per  year.  Figure  16 
illustrates  this  package. 


179.  Ground  Control  Global  Communications,  “Inmarsat  BGAN  pricing,”  accessed  14 
December  2014,  http://www.groundcontrol.com/Hughes_9201_BGAN.htm 

180.  Ground  Control  Global  Communications,  “Inmarsat  Service  Plan  pricing,”  accessed  14 
December  2014,  http://www.groundcontrol.com/BGAN_rate_plans.htm. 
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Hughes  9201  BGAN  Terminal 


KUuKEs. 


Global  machine-to-machine  communications 
via  Inmarsat  BGAN  service 


The  Hughes  9201  is  a  fully  IP-compatible  terminal  certified  for 
operation  on  Inmarsat’s  BGAN  global  communications  service. 
Rugged  and  easy  to  use.  the  9201  enables  simultaneous  IP 
packet  and  circuit-switched  data  communications  via  standard 
USB.  Ethernet.  ISDN,  and  802.1 1  WLAN  interfaces.  The  main 
features  are; 


492  kbps  IP  data  (transmit  &  receive) 

ISDN  voice  (4  kbps) 

ISDN  data  (64  kbps) 

Allows  simultaneous  use  of  all  interfaces  (Ethernet.  USB. 
ISDN,  and  WLAN) 

WLAN  access  point 

Multi-user  capability  (up  to  1 1  simultaneous  sessions) 
Selectable  Quality  of  Service  (32.  64.  128,  or  256  kbps  or 
X-stream) 

Lightweight,  easy  to  set  up  and  move 

Easy  to  set  up  ar>d  conr>ect.  the  Hughes  9201  is  built  to  operate 
in  even  extreme  weather  cor>drtions.  Multiple  user  support  means 
an  entire  team  can  share  a  single  9201  simultaneously,  providing 
an  802. 1 1  broadbar>d  wireless  LAN  at  any  site.  Compact  ar>d 
lightweight,  the  Hughes  9201  can  be  quickly  moved  from  site 
to  site  and  connects  within  minutes.  Combined  with  the  global 
coverage  of  Inmarsat’s  B(^N  service,  the  Hughes  9201  offers 
a  powerful  IP-compatible  gateway  for  corporate  teams  to  stay 
connected  and  to  share  critical  information  virtually  anywhere, 
anytime. 


Other  highiights 

Full  IP  compatibility — email,  file  transfer  (FTP).  VPN. 
browsing,  etc. 

Compatible  with  all  VPNs 

Cost-effective.  *‘always-on**  access — only  charged  for  data 
sent  and  received 

Web  MMI  is  accessible  via  Wi-Fi  enabled  smart  phor>es 

Auto  context  activation  feature  allovrs  PDP  contexts  to  be 

activated  without  user  action 

Easy  to  install  ar>d  connects  in  minutes 

UMTS  IP-based  services 

ISDN  supplenientary  services 

FCC.  CE.  and  GMPCS  certified 

Designed  aruf  developed  by  Hughes,  the  world  leader  in  broadband 
satellite  networks  and  services,  with  more  than  2.8  million 
terminals  shipped  to  customers  in  over  100  countries. 


Figure  16.  Hughes  9201  Broadband  Global  Area  Network  (BGAN).'i8i 


c.  ICT  Standard 

ICT  Standard  packages  have  the  potential  to  deliver  maximum  capability 
to  the  mission  team.  These  packages  may  consist  of  a  very  small  aperture 


terminal  (VSAT)  and  a  pair  of  Redline  802.16  WiMAX  antennas.  ICT  Standard 


solutions  provide  sufficient  capability  for  larger  organizations  with  greater  than 


181.  Hughes,  “9201  BGAN  terminal  documentation,”  accessed  14  December  2014, 
http://www.hughes.com/technologies/mobilesat-systems/mobile-satellite-terminals/hughes-9201- 
bgan-inmarsat-terminal. 
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eleven  concurrent  users.  HFN’s  current  ICT  Standard  implementation  fits  into  ten 
airline  transportable  tough  boxes,  making  them  highly  deployable.  An  ICT 
Standard  package  represents  the  most  costly  and  scalable  solution.  The  VSAT 
terminal  can  range  from  $20,000-$200,000  for  the  dish  itself.  In  addition,  the 
monthly  service  plan  ranges  from  $3,000-$20,000  depending  on  the  data  rate 
and  the  organizational  requirements.  For  extra  add-on  capabilities,  such  as 
ruggedized  Redline  (or  similar)  WiMAX  antennas.  Persistent  Systems  (or  similar) 
Wave  Relay  Wi-Fi,  and  RolP  interfaces,  the  cost  would  increase  substantially. 
Annual  cost  estimate  would  be  $36,000-$240,000  depending  on  the  service 
plan. 

As  with  ICT  Lite,  ICT  Standard  packages  come  with  mechanisms  to 
provide  basic  security.  As  bandwidth  increases,  the  cost  of  service  and  the 
number  of  end  devices  increases.  As  end  devices  connect  to  the  network, 
system  and  network  vulnerabilities  can  increase  exponentially.  When  possible, 
DR  mission  teams  should  ensure  that  end  devices  receive  updates  prior  to 
responding  to  a  disaster.  Reducing  existing  vulnerabilities  prior  to  a  deployment 
can  significantly  reduce  the  chance  of  an  adversary  gaining  unauthorized  access. 
Figure  17  illustrates  one  of  ViaSat’s  very  small  aperture  terminals.  Figure  18 
displays  a  picture  and  some  basic  data  on  Redline’s  802.16  WiMAX  antennas. 
Figure  19,  highlights  the  key  components  in  Persistent  System’s  WAVE  Relay 
point-to-point  network. 
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VIASAT  EXEDE  SURFBEAM  2  PRO-PORTABLE  SATELLITE 
TERMINAL 

►  Highly  portable 

*  Exede"  high  speed  seivice  plans 

>  Rugged  for  haishenviionments 

nDQIQDQD  ' 

f.  Live  Chat  Offline 
0  Login  to  use  our  wish  list 
0  E-mail  Me  A  Better  Price 

zoom  t 

Figure  17.  Very  Small  Aperture  Terminal  (Vsat).'i82 


>  Local  and  RernoteM&C 


182.  Satcom  Resources,  “Mobile  VSAT  terminal,”  assessed  14  December  2014, 
http://www.satcomresources.com/Viasat-Exede-Pro-Portable-Satellite- 
Terminal?sc=8&category=731 3. 
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Virtual  Fiber™  Outdoor  Wireless  TCP/IP  Transport 


I 


RAS-EXTEND 


Full  Motion  Auto-Acquire  Wireless 
TCP/IP  Data  Terminal 


The  RDL-3000  RAS-Extend  series  provides  secure  reliable  wireless  transport  directly 
to  land  vehicles,  marine  vessels,  and  floating  platforms  in  motion.  Easily  operated  by 
non-technical  personnel  with  no  special  training,  the  RAS-Extend  automatically 
obtains  and  holds  a  reliable  high-speed  connection  to  the  fixed  Redline  wireless 
network. 

FEATURES  AND  BENEFITS 

a  The  highly  reliable  touchless  operation  and  self-aiming  antenna  with 
continuous  signal  and  GPS  tracking,  requires  no  specialized  ItelecomI 
personnel  for  normal  operation 

a  High  throughput  for  concurrent  transport  of  M2M  telemetry  and  telecontrol, 
data,  video  and  voice  services 

a  Durable  all-weather  enclosure  for  reliable  operation  in  a  wide  range  of 
temperatures  and  environmental  conditions 
a  Over-the-air  monitoring,  configuration  and  software  keyed  features  enable 
upgrades  without  physical  access 

a  Software-defined  architecture  enhances  reliability  and  service  lifetime 

PRODUCT  COMPLEMENTS 

The  RAS-Extend  is  fully  compatible  with  all  Redline  RDL-3000  family  base 
stations  and  wireless  terminals.  Redline  provides  a  complete  selection  of 
peripherals  and  professional  services  for  all  your  deployment  needs. 


SYSTEM  AT  A  GLANCE 

Outdoor  auto-acquire  software- 
defined  wireless  terminal 


Extends  high  speed  TCP/IP 
transport  to  moving  land 
vehicles,  marine  vessels  and 
floating  platforms 


Reliable  fast  transport  of  M2M. 
data.  HD  video  and  voice  traffic 


Auto-acquire  with  full-time 
tracking  and  automatic  antenna 
alignment  with  built-in  GPS 


Wide  selection  of  MIMO 
antennas 


-15  to  55  °C  operating  range 
using  dynamic  and  thermal 
dissipation  (no  moving  parts! 


High-grade  cyber  security 
features 


UNIFIED  GLOBAL  SOLUTIONS 

Redline’s  patented  UWT™  technology  provides  a  truly  unified  wireless 
networking  solution— across  the  spectrum,  across  your  company  and  across 
the  globe— enabling  secure,  reliable,  high-speed  connectivity  to  people  and 
smart  devices  everywhere. 


Very  low  latency  supports 
time-sensitive  applications 


Over-the-air  monitoring, 
configuration,  upgrades  and 
software  keyed  speeds  and 
features 


Figure  18.  Redline  802.16  WiMAX  Line  of  Sight  (LOS)  Antenna.183 


183.  Redline  Communications,  “WiMAX  Line  of  Sight  Antenna,”  accessed  14  December 
2014,  http://rdlcom.com/products/ras-extend. 
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Figure  19.  Persistent  Systems  WAVE  Relay  Wi-Fi  and  Point-to-Point  (P2P) 

Network"' 


3.  Power  Generation  for  Solutions 

Some  ICT  packages  only  work  with  the  provider’s  alternate  power 
sources;  whereas,  other  ICT  packages  require  the  consumers  to  procure  their 
own  alternate  power  source  solutions. 

Due  to  natural  occurrences,  disasters  can  occur  anywhere  in  the  world, 
which  makes  it  difficult  to  recommend  a  specific  vendor  for  ICT  alternate  power 
generation  capability.  The  massive  numbers  of  ICT  kits  available  with  varying 
power  requirements  preclude  specifying  an  ideal  power  solution.  Alternate  power 
generation  requirements  will  vary  depending  on  the  size  and  functionality  of  the 


184.  Persistent  Systems,  “Wave  Relay  Manual  -  WR-01,”  ver.  1.1,  issued  12  April  2012, 
accessed  14  December  2014. 
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mission  team.  The  chart  in  Appendix  D  provides  a  comparison  of  alternate  power 
generation  technology. 

C.  A  4C  INTEGRATION  INTERFACE 

APAN,  Relief  Web,  and  Inrelief  all  provide  portals  to  assist  in  4C  planning 
and  collaboration.  Software  solutions  such  as  Jabber  and  Skype  equip 
responders  with  the  capability  to  coordinate  on  the  ground  via  voice  and  chat. 
Organizations  such  as  PDC  EMOPS,  ArcGis,  Google,  and  OpenStreetmaps 
provide  tools  and  capabilities  to  develop  a  common  operational  picture.  There  is 
currently  no  way  to  integrate  these  capabilities  into  a  common  interface  and  to 
allow  maximum  flexibility  and  user  preference.  Thus,  these  solutions  are 
problematic.  Based  on  Larry  Wentz’s  research ''^5  3^^  lessons  learned,  a  solution 
that  integrates  existing  technologies  and  4C  vendor  solutions  into  a  common  DR 
mission  interface  could  result  in  the  desired  system-level  impact.  The  solution 
must  provide  coverage  of  the  following  issues  and  attributes: 

•  Ownership,  implementation,  administration,  and  hosting 

•  Cloud  models  of  service  and  deployment 

•  Application  interface 

•  Mobile  application  interface 

•  Security  implications  of  the  models 

1.  Ownership,  Implementation,  Administration,  and  Hosting 

Development  of  the  trusted  third-party  organization  is  the  key  to  solving 
the  issue  with  deciding  ownership,  management,  and  administration.  Due  to 
potential  social  implications,  a  single  government,  military,  or  existing  DR 
organization  cannot  assume  responsibility  for  ownership,  management,  and 
administration  of  the  integration  interface  concept.  As  mentioned  in  the  example 
question  in  Chapter  III,  appointing  an  outside  entity  as  C2  for  DR  missions  could 
result  in  irreversible  second  and  third  order  effects. 


185.  Larry  Wentz,  “Haiti  Information  and  Communications  Observations:  Trip  report  for  Visit 
18  February  to  1  March  2010,”  Center  for  Technology  and  National  Security  (National  Defense 
University,  Washington,  DC,  08  August  2010). 
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Another  factor  to  consider  is  hosting  for  the  interface.  Since  disasters  can 
occur  worldwide,  hosting  the  interface  only  in  the  United  States  or  in  another 
single  country  would  not  be  effective.  To  provide  open  and  continuous  access  to 
the  interface,  it  has  to  be  hosted  in  a  distributed  manner. 

One  possible  solution  is  to  use  cloud-computing  technology  as  a  means  to 
provide  distributed  access  to  the  integration  interface.  The  use  of  cloud 
technology  allows  the  greatest  flexibility  by  providing  the  essential  characteristics 
of  on-demand  self-service,  broad  network  access,  resource  pooling,  rapid 
elasticity,  and  measured  service.''®® 

On-demand  self-sen/ice  allows  the  consumer  to  adjust  resource 
requirements  as  needed,  without  additional  human  interaction. Broad  Network 
Access  allows  device  agnostic  connections  to  network  assets  and  resources.''®® 
Resource  Pooling  provides  a  vast  quantity  of  storage,  processing,  network 
bandwidth  capability,  and  other  resources  for  the  consumer  on-demand  while 
maintaining  ambiguity  of  where  the  resources  are  actually  located. ''®9  The  Rapid 
Elasticity  component  allows  high  availability  models  to  succeed  through  the 
automatic  variability  of  resource  requirements  based  on  consumer  resource 
needs. ''9®  Finally,  the  Measured  Service  component  ensures  usage  transparency 
through  providing  monitoring,  controlling,  and  statistics  to  the  consumer.''®''  The 
essential  characteristics  of  a  cloud-based  solution  have  the  potential  to  grant  the 
consumer  access  to  a  wealth  of  on-demand  resources.'' ®2 


186.  Wayne  Jansen  and  Timothy  Grance,  Guidelines  on  Security  and  Privacy  in  Public  Cloud 
Computing,  National  Institute  of  Standards  and  Technology  Special  Publication  (NIST  SP  800- 
144)  (Gaithersburg,  MD,  December  201 1),  p.4. 

187.  Ibid. 

188.  Ibid. 

189.  Ibid. 

190.  Ibid. 

191.  Ibid. 

192.  Ibid. 
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Hosting  cost  is  an  additional  consideration  for  moving  services  to  the 
cloud.  Building  infrastructure  to  host  an  internationally  distributed  interface  that 
uses  a  traditional  data  center  model  would  require  a  significant  amount  of  money 
to  build.  In  addition,  maintaining  a  large  employee  base  for  application 
development,  information  management,  and  information  security  on  a  distributed 
international  scale  is  likely  to  be  unattainable. 

Traditional  storage  cost  versus  cloud-based  storage  cost  is  a  key  factor  to 
consider.  The  cost  of  accessing  cloud  storage  is  much  less  than  the  cost  of 
traditional  hard  drive  cost.  Table  3  provides  a  short  comparison. 


Table  3.  Cloud  Storage  Versus  Traditional. 


Mode 

Hard  Drivel 

193 

Hard  Drive2 

194 

Amazon  Web 
Svc^ss 

Microsoft 

Azure'll® 

Brand/ 

Model 

Seagate  NAS 
SATA  HDD 

Western  Digital 
NAS  SATA 

Amazon  S3 

Block  Blobs 

Capacity 

2  Terabytes 

2  Terabytes 

2  Terabytes 

2  Terabytes 

$  per  Unit 

$119.99 

$99.99 

N/A 

N/A 

$  per  TB 

$59.95 

$49.99 

$20.48- 

$61.44 

$40.96 

$122.88 

$  per  GB 

$17.08 

$50 

$0.01  -$0.03 

$0.02  -  $0.06 

$  per  year 

$0 

$0 

Usage  Based 

Usage  Based 

When  disasters  occur  and  DR  mission  teams  deploy,  resource 
requirements  increase  significantly;  they  decrease  as  the  teams  complete  their 


193.  Tiger  Direct,  “Seagate  Hard  Drive  Advertisement,”  accessed  29  January  2015. 
http://www.tigerdirect.com/applications/SearchTools/item- 
details.asp?EdpNo=9557692&Catld=4357. 

194.  Tiger  Direct,  “Western  Digital  Hard  Drive  Advertisement,”  accessed  29  January  2015, 
http;//www.tigerdirect.com/applications/SearchTools/item- 
details.asp?EdpNo=3580091  &csid=_61 . 

195.  Amazon  Web  Service,  “Storage  Pricing,”  AWS  EC2,  accessed  20  January  2015, 
http;//aws.amazon.com/ec2/pricing/. 

196.  Microsoft  Azure,  “Storage  Pricing,”  MS  Azure,  accessed  20  January  2015, 
http;//azure. microsoft.com/en-us/pricing/details/storage/. 
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missions  and  return  home.  Private  community  models  for  the  international  DR 
community  have  an  undefined  requirement  for  computing  resources. 

An  enterprise  system  managed  by  an  IT  staff  does  not  have  the  scalability 
that  is  present  in  a  cloud-based  deployment.  In  addition  to  scalability,  the  cost  of 
maintaining  staff  to  service  an  enterprise  solution  would  be  significant.  Employing 
staff,  leasing  data  centers,  and  paying  the  electric  bill  associated  with  operating 
the  data  center  are  factors  that  greatly  outweigh  the  cost  to  procure  cloud 
services. 

2.  Cloud  Models  of  Service  and  Deployment 

One  of  the  key  focuses  for  DR  mission  teams  is  allowing  the  local 
government  to  serve  as  primary  command  and  control  for  the  relief  effort.  Any 
technology  solution  for  DR  missions  must  consider  ways  to  protect  the  integrity  of 
that  command  structure.  As  such,  the  cloud  service  and  deployment  model 
design  has  to  incorporate  methods  that  facilitate  a  local  government  led  effort. 

The  service  model  selected  should  provide  an  interface  for  the  DR 
customers.  The  cloud  model  of  service  for  a  DR  system-level  solution  would 
need  to  support  the  development,  testing,  and  implementation  of  applications 
that  facilitate  integration  of  existing  4C  solutions. 

In  accordance  with  the  National  Institute  of  Standards  and  Technology 
(NIST)  special  publication,  there  are  three  types  of  service  models  and  four  types 
of  deployment  models  for  cloud  based  solutions.  Tables  4  and  5  identify  the 
models  for  service  and  deployment. 
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Table  4.  Cloud  Service  ModelsT^^ 


Service  Models 

Access  Granted 

Software  as  a 
service  (Saas) 

Consumer  can  access  and  use  provider  software. 
Provider  is  responsible  for  all  security. 

Platform  as  a 
service  (PaaS) 

Consumer  can  create  programs  using  provider- 
approved  methods  and  deploy  applications  into  the 
cloud.  Consumer  is  responsible  for  application  security. 

Infrastructure  as 
a  service  (laaS) 

Consumer  has  power  to  build,  modify  and  maintain 
servers.  Consumer  is  responsible  for  all  privacy  and 
security  considerations. 

Software  as  a  service  (SaaS)  would  allow  use  of  specific  software  or 
interface.  From  a  user’s  perspective,  this  model  does  not  allow  specific 
configuration.  Interfaces  would  remain  fixed.  SaaS  is  a  common  model  used  for 
access  to  Electronic  health  records  (EHR)  and  electronic  medical  records  (EMR). 
Confidentiality,  integrity,  availability,  and  authentication  (CIA-A)''^^  of  data  and 
information  are  the  responsibility  of  the  vendor  or  SaaS  service  provider. 

The  platform  as  a  service  (PaaS)  model  facilitates  more  flexibility  by 
allowing  the  user  to  create  useful  applications  and  interfaces.  PaaS  provides 
organizations  and  users  with  the  capability  to  develop  and  test  their  own 
applications.  Upon  provider  approval,  they  can  integrate  these  applications  into 
the  interface.  The  negative  aspect  to  the  PaaS  model  is  that  only  the  provider 
can  approve  interface  implementations. 

Infrastructure  as  a  service  (laaS)  allows  the  maximum  control  of  the 
servers,  software  development,  and  implementation.  It  still  follows  the  distributed 
cloud  based  architecture.  By  increasing  the  flexibility  to  an  laaS,  the  consumer  is 
now  the  provider.  Now,  the  consumer  is  responsible  for  all  aspects  of  security 
and  privacy  from  the  virtual  servers  and  storage  to  application  security.  Although 
laaS  is  the  most  powerful  and  flexible  cloud-based  model  of  service,  it  requires 

197.  Wayne  Jansen  and  Timothy  Grance,  Guidelines  on  Security  and  Privacy  in  Public  Cloud 
Computing,  National  Institute  of  Standards  and  Technology  Special  Publication  (NIST  SP  800- 
144)  (Gaithersburg,  MD.  December  2011),  4. 

198.  Shon  Harris,  All-In-One  CISSP  Exam  Guide,  ed.4  (New  York,  NY:  McGraw-Hill,  2008). 
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the  most  overhead,  administration,  and  cost  to  the  consumer.  Depending  on  their 
prescribed  functions  and  operation,  very  large  organizations  with  an  existing 
enterprise  network  may  benefit  from  moving  some  or  all  aspects  of  their  network 
to  an  laaS  model. 


Table  5.  Cloud  Deployment  Models. 


Service  Models 

Access  Granted 

Private  Cloud 

Use:  Single  Organization 

Management:  Internal  or  external  organization. 

Location:  Local  or  remote 

Community 

Cloud 

Use:  Specific  Community 

Management:  Single  organization,  multiple  organizations, 
or  external  organization. 

Location:  Local  or  remote 

Public  Cloud 

Use:  Open  to  the  public 

Management:  Business,  academy,  government 

Location:  Cloud  provider  premises 

Hybrid  Cloud 

A  combination  of  two  or  more  deployment  models  which 
are  typically  unique. 

3.  Private  Community  Disaster  Reiief  Plans  and  Partnerships 

Regardless  of  proximate  causation,  the  local  government  will  always  take 
the  blame  for  a  botched  response  to  disaster  relief.  With  this  in  mind,  the  custom 
interface  designer  must  provide  a  means  to  share  information  with  early 
responder  organizations  outside  of  their  private  communities  while  allowing  the 
local  government  to  remain  in  command  and  control  (C2)  of  the  relief  effort.  The 
example  DR  cloud  model  in  Figure  20  provides  community  partnership  capability 
to  share  information.  Partnerships  are  typically  specified  using  memorandums  of 
understanding  (MOUs)  and  service  level  agreements  (SLAs). 


199.  Wayne  Jansen  and  Timothy  Grance,  Guidelines  on  Security  and  Privacy  in  Public  Cloud 
Computing,  National  Institute  of  Standards  and  Technology  Special  Publication  (NIST  SP  800- 
144)  (Gaithersburg,  MD.  December  2011),  3,  4. 
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Figure  20.  Disaster  Relief  Cloud  Deployment  Model  Example. 

Establishing  disaster  response  plans  will  significantly  reduce  anarchy  and 
chaos  that  occurs  because  of  the  disaster.  Thus,  it  is  important  for  organizations 
to  develop  a  disaster  response  plan  (DRP)  and  a  contingency  disaster  response 
plan  (CDRP).  The  DRP  allows  local  governments  to  develop  procedures  that 
facilitate  saving  lives  and  expedite  recovery  within  respective  countries.200 

DRPs  consider  all  aspects  that  deal  with  emergency  response  for  the 
country.  In  the  case  of  a  very  large-scale  disaster,  the  government  may  or  may 
not  have  the  capability  to  effectively  implement  its  DRP.  As  was  experienced  in 
Haiti  in  2012,  the  government  and  UN  were  incapable  of  leading  an  effective 


200.  Ready.gov,  “Emergency  Response  Plan,”  19  December  2012,  accessed  10  January 
2015,  http://www.ready.gov/business/implementation/emergency. 
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relief  effort  20'i  In  situations  such  as  this,  a  CDRP  could  provide  continuity  when 
the  local  government  is  not  able  to  respond  effectively. 

As  most  people  understand,  things  do  not  always  work  as  planned. 
However,  having  a  countrywide  DRP  and  CDRP  would  provide  a  framework  by 
which  local  government  and  incident  responders  could  modify  or  change  the  plan 
to  meet  the  situation  at  hand.  In  line  with  General  George  S.  Patton,  “A  good  plan 
executed  violently  now,  is  better  than  a  perfect  plan  executed  next  week. ”202 
Having  the  framework  in  place  could  significantly  reduce  chaos,  anarchy,  and 
recovery  time. 

A  DR  communication  strategy  supports  the  development  and 
implementation  of  DRPs  and  CDRPs.  Furthermore,  the  concepts  introduced  in 
this  chapter  support  and  encourage  development  of  community  wide  DRPs  and 
CDRPs.  DRPs  within  a  private  community  or  a  country,  enumerates  the 
processes  for  the  disaster  response  system  within  the  country.  The  CDRP 
designates  what  occurs  in  the  event  that  the  country  is  unable  to  effectively 
respond  to  the  crisis.  The  CDRP  spells  out  which  partner  organizations  will  be 
involved  in  the  relief  effort.  The  CDRP  replicates  the  DRP  processes,  but  it  also 
establishes  temporary  leadership  roles  when  the  local  government  is  unable  to 
maintain  C2  of  the  response.  The  temporary  mission  leader  follows  the 
procedures  spelled  out  in  the  DRPs  of  the  private  communities  and  only  uses  the 
collaboration  and  integration  tools  authorized  by  the  local  government. 

Creation  of  the  CDRP  integrates  partner  organizations  into  the  concept  of 
operations  before  an  incident  occurs.  When  a  disaster  occurs,  the  DRP  and 
CDRP  guide  the  activities  of  participating  mission  teams.  A  clear  understanding 


201.  Brian  Sleekier,  “Hastily  Formed  Networks  for  HA/DR.”  Classroom  Instruction  (Naval 
Postgraduate  School,  Monterey,  CA.  22  June-16  September  2014). 

202.  General  George  S.  Patton  Jr.,  “Quotes,”  accessed  13  January  2015, 
http://www.generalpatton.com/quotes/index.html. 
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of  the  roles  and  responsibilities  of  the  DR  mission  teams  combines  relief  efforts 
and  presents  an  international  based  unified  front  for  the  DR  203 

Issues,  mentioned  throughout  the  AARs  and  in  Larry  Wentz’s  comments, 
stress  bandwidth  saturation  and  the  lack  of  a  frequency  management  plan.204 
The  preplanning  that  occurs  during  the  development  of  the  DRP  and  CDRP 
facilitates  the  creation  of  a  frequency  management  plan.  A  local  government 
dictated  frequency  management  plan  could  potentially  reduce  some  of  the  issues 
with  bandwidth  saturation  and  interference  during  disaster  relief  missions.  Figure 
21  illustrates  the  proposed  partnership  concept,  and  Figure  22  represents  the 
private  community  relationship  model. 


DR  SLA  Example:  Philippines 


XXX  Country 
Community  Interface 


NGO  Community 
Interface 


Figure  21 .  Service  Level  Agreement  Partnership  Concept. 


203.  Larry  Wentz,  “Haiti  Information  and  Communications  Observations:  Trip  report  for  Visit 
18  February  to  1  March  2010,”  Center  for  Technology  and  National  Security  (National  Defense 
University,  Washington,  DC,  08  August  2010). 

204.  Ibid. 
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Private  Community  Concept  Modei 
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Figure  22.  Private  Community  Relationship  Model. 


4.  Private  Community  Appiication  Interface 

Some  of  the  current  web-based  interfaces  are  extremely  complicated  and 
require  significant  time  to  learn  how  to  use  them  effectively.  The  interface  for  DR 
missions  should  be  highly  intuitive.  The  user  should  not  have  to  spend  more  than 
ten  minutes  learning  the  functionality  of  the  interface.  As  such,  some  sort  of 
instructional  self-help  and  technical  support  options  may  be  required.  The 
following  represent  key  functions  of  the  interface: 

1 .  Account  creation 

2.  Interface  command  and  control  (C2) 

3.  Integration 

4.  Common  operating  picture 

5.  Disaster  alert  system 

Figure  23  provides  a  visual  (notional)  representation  of  the  DR  interface. 
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Figure  23.  Example  Private  Community  Interface. 


a.  Interface  Account  Creation 

Account  creation  for  private  community  interfaces  is  slightly  different  from 
traditional  sites.  The  only  way  for  a  user  to  obtain  access  to  an  account  within  a 
private  community  is  through  organizational  referral.  Before  the  creation  of  the 
interface,  the  community  owner  (country  government  or  organization)  must 
designate  individuals  to  serve  as  account  managers.  Account  managers  that  are 
appointed  should  be  working  in  a  human  resources  or  management  role  within 
the  organization.  This  places  the  responsibility  of  user  verification  on  the  local 
governments.  Accounts  are  restricted  to  government  employees  and  critical 
disaster  relief  entities.  Designated  organization  owners  must  approve  or  deny 
accounts  outside  the  government.  Each  private  organization  may  coordinate  with 
the  trusted  organization  to  establish  an  account  vetting  system. 
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b.  Interface  Command  and  Control 

The  community  manager  or  designated  representatives  dictate  the 
functionality  and  tools  of  their  interface.  The  trusted  organization  implements  and 
manages  the  interface  in  accordance  with  community  interface  owner 
specifications.  The  private  community  owner  (local  government  or  organization 
manager)  dictates  the  collaborative  and  organizational  tools  used  for  disaster 
response  within  its  country.  When  external  entities  and  partners  elect  to 
participate  in  the  mission,  they  must  use  the  designated  tools  indicated  in  the 
SLA  of  the  affected  country. 

The  community  planning  product  section  provides  a  space  local  to  the 
interface  where  planning  and  collaboration  can  take  place.  The  community 
products  are  only  accessible  within  the  community.  The  government  or  owner  of 
the  private  community  can  dictate  information  shared  with  partners  based  on  the 
SLA  of  each  partner.  The  key  buttons  within  the  community  planning  section  are 
DRPs  and  frequency  management  plan  (FMP). 

User  tutorial  and  help  options  buttons  are  available  within  the  interface. 
This  feature  allows  the  user  to  go  through  a  ten-minute  tutorial  on  using  the 
interface  and  review  the  options  available  within  the  interface.  Upon  completion 
of  the  tutorial,  the  user  has  access  to  Frequently  Asked  Questions  (FAQ)  and 
technical  support  request  sections.  This  section  also  contains  contact  information 
for  an  interface  support  section  managed  by  the  new  organization. 

The  DRP  and  FMP  sections  are  standard  for  each  interface.  The 
community  owner  can  choose  to  upload  their  DRPs  and  FMPs  to  the  site.  This 
section  also  comes  equipped  with  a  DRP  and  FMP  creation  tutorial.  In  the  event 
that  the  organization  owner  does  not  have  a  DRP  of  FMP,  they  can  create  the 
products  using  an  automated  process.  Qnce  the  automated  process  is  complete, 
the  process  generates  a  workflow  process  to  allow  for  DRP  and  FMP  approval 
process. 
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There  are  numerous  additional  features  available  within  the  community  for 
planning  and  continuity.  The  government  or  community  owner  dictates  the 
additional  features  available  within  the  community  planning  section.  The 
community  planning  section  and  tutorial  sections  are  located  on  the  upper  left 
hand  side  of  Figure  24. 


Figure  24.  Mobile  Application  Interface.^os 


c.  Integration  with  Existing  4C  Products 

Many  organizations  have  developed  inventive  products  for  collaboration 
and  communication  for  DR.  With  all  of  these  tools  available  to  DR  mission  teams, 
data  becomes  disparate  and  distributed  among  competing  provider’s  solutions. 
Rather  than  creating  a  new  tool,  this  model  proposes  an  integration  concept  for 
collaboration  and  communications  tools.  This  interface  concept  supports  the  use 

205.  Folsom,  Eric  and  Brooks  King,  Private  Community  Concept  Model,  Naval  Postgraduate 
School,  February  2014. 
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of  existing  solutions  for  4C.  Integration  of  existing  4C  solutions  for  governments 
and  organizations  occurs  during  the  initial  private  community  planning  process. 
This  allows  DR  users  access  to  commonly  used  tools  for  DR  missions  within  the 
common  private  community  interface.  Integration  facilitates  moving  data  to  the 
private  community  when  and  if  the  community  owner  desires. 

The  integration  concept  includes  developing  an  application  repository. 
When  governments  and  organizations  require  specific  DR  tools,  the  trusted 
organization  must  work  with  existing  4C  providers  to  facilitate  product  integration. 
During  the  development  of  integration  applications,  users  may  require  access  to 
their  preferred  4C  products.  Each  user  can  add  private  links  to  preferred  tools  to 
the  awaiting  development  container  of  the  interface.  Once  the  application  is 
ready  for  use,  the  requesting  user’s  organization  receives  notification,  and  it 
becomes  available  in  the  interface  application  repository.  A  repository  structure 
also  allows  partner  organizations  to  incorporate  the  use  of  designated  tools  as 
needed  for  DR  missions. 

In  addition  to  integrating  existing  solutions,  governments  and 
organizations  can  integrate  their  existing  traditional  infrastructure  with  the 
interface.  The  trusted  organization  can  work  with  each  private  community  to 
provide  a  federated  identity  and  single  sign-on  solution. 206 

d.  Common  Operational  Picture 

A  common  operational  picture  (COP)  provides  a  means  for  the 
government  and  community  to  monitor  the  efforts  of  DR  teams.  The  Pacific 
Disaster  Center’s  (PDC)  DisasterAware  software  provides  the  capability  for  real¬ 
time  situation  reporting;  if  internationally  accepted,  it  could  potentially  serve  as  a 
viable  COP  solution  provider.  Unfortunately,  the  lack  of  trust  and  social 
complexity  with  the  DR  system  has  rendered  international  COP  participation  for 


206.  CA  Technologies,  “Federated  Identity  and  Single  Sign-On  Using  CAAPI  Gateway,” 
2014,  accessed  22  January  2015,  http://www.ca.com/us/~/media/Files/whitepapers/federated- 
identity-and-single-sign-on-using-ca-api-gateway.pdf. 
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DR  ineffective .207  Instead  of  creating  another  COP  solution,  this  thesis  proposes 
an  integration  solution  to  COP. 

As  with  most  features  in  this  interface  concept,  the  owner  of  the  private 
community  dictates  the  mapping  solution.  This  model  supports  map  service 
provider  neutrality.  As  long  as  the  designated  map  provider  has  an  application 
programming  interface  (API),  the  trusted  organization  can  attempt  to  negotiate 
integration  into  the  interface.  The  integration  can  ensure  that  data  normalization 
is  seamless  to  the  user  and  the  map  datum  is  proliferated  throughout  the  private 
community  interface.  Integration  enables  data  normalization  between  the  map 
provider  and  the  integration  interface.  Once  the  integration  occurs,  government 
approved  partner  organizations  have  access  to  a  common  operating  picture 
using  their  selected  map  provider. 

An  important  step  with  the  creation  of  this  COP  concept  is  to  facilitate  use 
of  the  interface  in  constrained  bandwidth  situations.  Although  3G  and  4G  cellular 
technologies  allow  access  to  web-based  interfaces  via  mobile  phone,  the  cellular 
networks  often  become  over-saturated  when  disasters  occur.  During  Hurricane 
Ike  in  2008,  AT&T  cellular  service  was  flooded  throughout  Southwest 
Louisiana. 208  Because  of  the  cellular  congestion,  AT&T  implemented  an 
automated  message  saying  all  circuits  were  currently  busy.209  In  addition  to 
diminished  voice  calls,  SMS  was  also  intermittent  in  the  area.2'io  Because  of 
situations  like  Hurricane  Ike,  it  is  important  to  have  other  options  for  mobile  4C 
that  do  not  rely  on  cellular  service. 

The  common  operational  picture  is  very  important  for  DR  as  it  forms  the 
basis  for  the  mission.  The  ability  to  view  the  actual  or  projected  position  of  a 
mission  team  is  powerful.  This  functionality  could  mitigate  some  potential  issues 

207.  Rebecca  Goolsby  Ph.D.,  Office  of  Naval  Research,  email  message  to  author,  12 
December  2014  (Appendix  B). 

208.  Folsom,  Eric  M.,  personal  experience.  Fort  Polk,  LA,  September  2008. 

209.  Ibid. 

210.  Ibid. 
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indicated  in  AARs  and  reports.  If  a  DR  mission  team  can  view  areas  and  other 
responders,  they  could  potentially  identify  and  deploy  to  areas  with  limited  to  no 
relief  support.  Teams  deploying  to  an  area  in  need  of  support  could  result  in 
saving  additional  lives.  The  stars  in  Figure  25  indicate  areas  that  need  support;  a 
DR  team  that  possesses  the  resources  needed  could  attempt  to  provide  support 
to  the  entity.  This  could  increase  the  productivity  of  individual  mission  teams  as 
well  as  the  collective  relief  effort. 


Figure  25.  Mobile  Application  lnterface.2'i'i 


e.  Disaster  Alert  System 

At  the  current  time,  there  is  no  internationally  recognized  DR  alert  system. 
Flowever,  the  Common  Alerting  Protocol  (CAP)  is  coming  quite  close  to 
international  acceptance.  Without  an  internationally  accepted  alerting  solution  for 

211.  Folsom,  Eric  and  Brooks  King,  Private  Community  Concept  Model,  Naval  Postgraduate 
School,  February  2014. 
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international  DR  missions,  there  is  no  way  to  establish  a  condition  level  for  the 
relief  effort.  The  interface  provides  a  disaster  alert  matrix  and  condition  elevation 
schema.  The  disaster  relief  elevation  matrix  in  Appendix  D  provides  a 
government  managed  alert  system  model  for  each  private  community. 

The  DR  alert  matrix  places  the  responsibility  of  disaster  response  and 
disaster  relief  support  on  the  local  government.  Each  category  has  its  respective 
authority  levels  and  support  categories.  The  example  of  a  hypothetical  situation 
below  assumes  that  DRPs  and  CDRPs  are  established,  that  the  government  is 
using  the  interface,  and  that  the  U.S.  Military  serves  as  temporary  C2  for  the  DR 
event. 

A  massive  9.0  earthquake  wipes  out  the  buildings  and  infrastructure  of 
Cuba.  The  President  and  government  leadership  of  Cuba  is  either  dead  or 
trapped  beneath  the  rubble.  There  is  no  distinct  leadership;  chaos  ensues. 

In  Santa  Clara,  one  city  official  and  several  firefighters  escaped  from  the 
building  before  it  collapsed.  The  current  disaster  matrix  status  remains  at  level  1 
of  5.  After  trying  to  contact  higher  government  echelons,  the  official  accesses  the 
alert  matrix  to  raise  the  level  appropriately.  Based  on  his  assessment,  the 
disaster  level  is  elevated  to  level  5  of  5. 

Private  community  partners  and  the  U.S.  government  are  automatically 
notified  when  the  disaster  level  is  raised.  Based  on  Cuba’s  CDRP,  the  U.S. 
Military  deploys  and  provides  contingency  C2  for  the  relief  effort. 

Although  this  is  not  a  likely  scenario  for  the  model,  the  potential  to  have 
this  effect  is  resident  within  the  interface  concept.  Since  the  private  community 
CDRP  was  in  place  for  this  scenario,  no  additional  bureaucracy  was  required  to 
deploy  and  provide  DR.  Having  a  contingency  disaster  relief  plan  in  place  will 
eliminate  some  of  the  confusion,  chaos,  and  anarchy  within  the  DR  system. 
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5.  Mobile  Application  Interface 

The  prolific  nature  of  today’s  network  technologies  warrants  provision  of  a 
platform  non-specific  integrated  interface.  Accessibility  to  the  interface  using 
mobile  devices  is  paramount.  Mobile  devices  represent  an  inexpensive 
alternative  to  large  ICT  solutions  when  cellular  service  is  available. 

In  many  of  the  disasters,  cellular  networks  and  critical  communication 
infrastructure  go  down;  the  only  access  to  communications  is  via  satellite.  Mobile 
Global  Positioning  System  (GPS-based)  ICTs  are  an  option  when  cellular 
services  are  unavailable.  GPS-based  systems,  such  as  Delorme,  inReach,  and 
SPOT  allow  the  subscriber  to  send  position  information  and  a  160-character  text 
message.  Traditional  web-based  interfaces  may  not  be  accessible  on  GPS 
devices. 

For  mobile  devices  to  communicate  directly  with  the  DR  interface,  the  new 
organization  must  work  with  GPS  ICT  providers  to  develop  a  custom  mobile 
application.  Since  the  devices  are  GPS-based  with  onboard  maps,  viewing  a 
private  community  COP  would  only  require  the  transfer  of  metadata  for  reports 
and  team  positions. 

The  map  portion  of  the  interface  provides  normalized  input  and  output  for 
situational  reports.  A  method  of  slimming  down  inputs  for  situational  reporting 
allows  only  a  unique  ID  field,  GPS  position  field,  and  a  details  field  consisting  of 
no  more  than  160  characters.  This  reporting  limitation  may  facilitate  bi-directional 
traffic  from  mobile  devices  to  the  integrated  mapping  interfaces. 

Incorporating  mobile  devices  also  supports  an  inexpensive  prepositioning 
capability.  Prepositioning  mobile  devices  in  critical  locations,  throughout 
countries  or  areas  that  experience  frequent  disasters,  could  significantly  increase 
DR  response  quality.  In  some  cases,  this  could  reduce  the  time  it  takes  to 
receive  damage  assessments  from  remote  areas  that  have  limited  capability  and 
funding.  Within  minutes  after  an  earthquake  occurs,  or  as  the  eye  of  the  storm 
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passes  over  an  area,  a  report  generation  is  possible.  Figure  26  provides  an 
example  of  a  potential  mobile  application  interface. 


Figure  26.  Mobile  Application  Interface.2'i2 


212.  Folsom,  Eric  and  Brooks  King,  Private  Community  Concept  Model,  Naval  Postgraduate 
School,  February  2014. 
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V.  CYBERSECURITY 


Large-scale,  layered  security  mechanisms  influence  usability,  functionality, 
and  access  to  resources.  This  strategy  proposes  the  development  of  a  baseline 
security  plan.  A  security  plan  specifies  the  system  security  requirements  and  the 
measures  implemented  to  meet  the  requirements.2'i3  In  addition,  a  security  plan 
specifies  responsibilities  within  the  organization  and  defines  acceptable  systems 

usage. 214 

The  primary  purpose  behind  providing  ICT  capability  is  to  facilitate 
communication  between  mission  teams.  Introducing  security  plans  that  occupy 
bandwidth  in  a  bandwidth-limited  environment  may  prove  to  be  counter¬ 
productive.  A  communications  strategy  implemented  without  an  overall  security 
plan  leaves  DR  mission  teams  vulnerable  to  cyber-attack. 

Developing  a  security  plan  and  implementing  security  mechanisms  and 
measures  within  the  DR  system  represents  a  technical  and  social  challenge.  The 
international  community  may  not  support  unified  security  policies.  Because  of 
this,  the  security  requirements  and  policies  of  each  private  community  will  differ 
significantly. 

It  is  also  a  technical  challenge  because  the  model  presented  in  this  thesis 
is  conceptual  in  nature.  For  this  model,  the  trusted  organization  is  responsible  for 
security  of  data  resident  on  private  community  interfaces.  In  addition,  the 
organization  is  responsible  for  ensuring  the  data  is  bi-directionally  secure  from 
the  laaS  systems  to  the  private  community  users. 

Because  of  societal  differences  and  incomplete  design  specifications,  a 
discussion  of  all  security  requirements  and  security  controls  is  not  possible.  The 


213.  Marianne  Swanson,  Joan  Hash  and  Pauline  Bowen,  Guide  For  Developing  Security 
Plans  for  Federal  Information  Systems,  National  Institute  of  Standards  and  Technology  Special 
Publication  (NIST  SP  800-18),  Rev  1,  February  2006. 

214.  Ibid. 
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security  section  discusses  some  general  security  considerations  for  common 
issues  among  disparate  implementations. 

A.  INFORMATION  AND  COMMUNICATION  TECHNOLOGY  SECURITY 

This  security  strategy  supports  a  bring-your-own  ICT  (BYO  ICT)  concept. 
BYO  ICT  allows  DR  mission  teams  to  procure  communication  capabilities  that 
best  support  their  organizational  needs.  ICTs  function  as  4C  enablers  and  are 
primarily  concerned  with  sending  and  receiving  traffic.  Since  the  focus  of  ICT  is 
to  facilitate  4C,  one  of  the  major  concerns  is  securing  data  in  transit  to  prevent 
adversary  access  to  responder  position  and  situation  information. 

Transport  Layer  Security  (TLS)  represents  a  simple  solution  for  securing 
data-in-transit.  TLS  provides  a  reliable,  secure  connection  for  cryptographic  key 
exchange  and  encryption  of  data-in-transit.2'i5  JLS  provides  confidentiality  and 
message  integrity  through  implementing  symmetric,  pre-shared  keys.^is  it  also 
allows  the  use  of  asymmetric  cryptography  for  authentication.2'i7 

ICT  mobile  solutions  present  their  own  breadth  of  vulnerabilities.  Mobile 
ICTs  may  consist  of  a  combination  of  phones,  tablets,  PDAs,  GPS  devices,  and 
items  such  as  BRCK.2'i8  Due  to  the  variety  of  systems,  a  feasible  solution  for 
securing  data-in-transit  for  mobile  ICTs  is  to  develop  a  secure  mobile  application 
for  each  platform.  The  application  requires  user  authentication  and  encryption  for 
two-way  transfer  of  situational  information  between  the  device  and  the  integrated 
private  community  interface.  Most  financial  mobile  applications  require  single 
factor  authentication  but  add  extra  single  factor  security  to  verify  user  identities. 
USAA  federal  savings  bank  adds  personal  identification  numbers  (PIN),  security 

215.  Internet  Engineering  Task  Force  (lEFT),  TLS  Protocol,  ver.  1.0,  lEFT  Request  for 
Comments  (RFC)  2246,  January  1999. 

216.  William  Stallings,  Data  and  Computer  Communications,  ed.9  (Prentice  Hall,  New  Jersey. 
2011). 

217.  Internet  Engineering  Task  Force  (lEFT),  TLS  Protocol,  ver.  1.0,  lEFT  Request  for 
Comments  (RFC)  2246,  January  1999. 

218.  BRCK,  “BRCK  Specifications  Page,”  2014,  accessed  25  January  2015, 
http://www.brck.com/specification/. 
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questions,  and  phone  number  affiliation  to  match  online  personas  with  account 
holders.  These  techniques  add  additional  security  measures  but  still  rely  on 
single  factor  authentication  techniques. 219  With  mobile  devices,  multi-factor 
authentication  may  be  the  best  option  for  ensuring  confidentiality,  integrity, 
availability,  and  authenticity  (CIA-A).220 

Additional  considerations  for  mobile  devices  are  physical  access  and 
protection  of  data-at-rest.  Mobile  devices  are  generally  small  and  can  be  easily 
lost  or  stolen.  If  an  adversary  can  obtain  physical  access  to  a  mobile  device,  he 
or  she  can  likely  gain  access  to  the  resident  data.  Adding  additional  security 
layers,  such  as  device  access  codes  and  drive  level  encryption  would  make  it 
more  difficult  for  adversaries  to  gain  access  to  the  device. 

Some  ICT  platforms  allow  users  to  communicate  using  Wi-Fi  and 
Bluetooth  technologies.  These  technologies  provide  communications  flexibility 
and  represent  an  integral  functionality  for  DR  mission  teams.  Most  Wi-Fi  access 
points  employed  in  these  packages  provide  methods  to  protect  data-in-transit 
using  common  encryption  standards.  Depending  on  when  the  device  was 
developed,  some  ICTs  rely  on  obsolete  encryption  standards. 

The  9201  model  BGAN  in  use  for  FIFN  relies  on  Wired  Electronic  Privacy 
(WEP)  to  protect  data-in-transit  over  the  local  area  network.  The  use  of  obsolete 
standards  empowers  adversaries  with  the  capability  to  intercept  and  decrypt 
data-in-transit.  DR  mission  teams  need  to  be  aware  of  encryption  standards  used 
in  their  packages  and  should  replace  legacy  devices  with  an  improved  version 
when  resident  encryption  standards  become  obsolete.  As  of  2010,  it  only  takes 
three  seconds  to  crack  a  104-bit  WEP  key  and  sixty  seconds  to  crack  Wi-Fi 
Protected  Access  (WPA)  using  Temporal  Key  Integrity  Protocol  (TKIP) 


219.  Shon  Harris,  All-In-One  CISSP  Exam  Guide,  ed.4  (New  York,  NY:  McGraw-Hill.  2008). 

220.  Ibid. 
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algorithm .221’  222  Qf  2013,  the  best  wireless  security  standard  available  to  the 
public  is  WPA2  Pre  Shared  Key  (PSK)  using  Advanced  Encryption  Standard 
(AES)  encryption. 223’  224  it  js  important  to  understand  that  WPA2  PSK  requires 
administration  and  management.  As  a  BYO  ICT  concept,  private  community 
owners  are  responsible  for  ensuring  that  approved  ICT  packages  conform  to 
industry  encryption  standards. 

Some  ICT  platforms  incorporate  the  use  of  the  WiMAX  (802.16) 
technology.  WiMAX  systems  provide  a  broadband  network  connection  over  large 
distances  using  wireless  line  of  site  propagation  (10-66  Ghz)  or  non-line  of  site 
(6-10  Ghz)  using  advanced  modulation  for  mobile  base  station  configuration. 225 
WiMAX  supports  point-to-point,  point-to-multipoint,  multi-hop  relay,  and  mobile 
configurations.226  The  system  protects  data-in-transit  through  use  of  security 
associations,  X.509  digital  certificates,  and  authorization  keys  to  verify  Base 
Stations  (BS)  and  Subscriber  Stations  (SS).227  Despite  its  enhanced  security 
protection  mechanisms,  WiMAX  is  still  vulnerable  to  RF  jamming,  base  station 
impersonation,  and  eavesdropping.  To  reduce  exposure  to  the  adversary,  DR 
teams  should  ensure  that  they  use  the  highest  available  encryption  standards. 


221.  Peter  Sayer,  “Researchers  Crack  WEP  Wi-Fi  Security  in  Record  Time,”  IDG  News 
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Furthermore,  process  and  policy  based  security  controls  can  help  to  counter 
additional  vulnerabilities .228 

The  information  contained  in  the  previous  section  only  discusses  security 
vulnerabilities  identified  during  previous  DR  after  action  reports.  There  are  other 
vulnerabilities  specific  to  ICT  implementation  that  should  be  researched  and 
addressed.  It  is  also  important  to  understand  that  as  ICT  capability  and 
functionality  increases,  additional  vulnerabilities  may  arise. 

B.  RESPONSIBILITY  AND  INTERFACE  DESIGN  IMPLICATIONS 

Many  organizations  and  governments  have  existing  security  policies  and 
security  controls  that  help  protect  their  current  enterprise  solution.  The  custom 
managed  interface  supports  existing  policies  and  security  controls  while  allowing 
integration  into  the  network  using  a  federated  identity  management  solution. 

1.  Service  Agreement  and  Joint  Responsibiiities 

The  trusted  organization  serves  as  an  external  service  provider  to  all 
organization  owners.  The  customers  (private  community  owners)  subscribe  to 
services  from  the  external  service  provider  (the  trusted  organization)  that  fall 
“outside  of  the  traditional  security  authorization  boundaries  (physical  or  logical) 
established  by  the  customer  organization. ”229  Customers  or  stakeholders  who 
desire  access  to  the  integrated  interface  work  with  the  trusted  organization  to 
develop  a  custom  private  community  for  each  government  and  DR  organization. 

A  service  agreement  (SA)  is  created  between  the  trusted  organization  and 
private  community  owners  to  identify  the  level  of  service  and  indicate  specific 
roles  and  responsibilities.  The  SA  outlines  and  specifies  general  security  policies 
and  controls  for  the  community.  The  SA  serves  as  a  baseline  for  the  organization 
and  assures  the  community  owner  that  their  data  is  protected.  The  policies  and 

228.  Ibid. 

229.  U.S.  Department  of  Commerce,  Security  and  Privacy  Controls  for  Federal  Information 
Systems  and  Organizations,  National  Institute  of  Standards  and  Technology  Special  Publication 
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security  controls,  specified  in  the  provider  SA,  apply  to  the  entire  community.  The 
mutually  approved  SA  provides  the  specifications  for  creating  the  detailed  design 
document. 

The  detailed  design  document  establishes  guidelines  for  each  community, 
map  provider  of  choice,  storage  requirements,  and  existing  4C  solutions  that 
require  integration.  The  trusted  organization  negotiates  with  existing  4C  providers 
to  provide  integration  support  for  the  private  community  owner.  This  custom 
packaged  interface  allows  the  DR  community  owner  to  continue  to  use  existing 
4C  solutions  while  accessing  the  products  in  a  private  community  common 
interface. 

Moving  services  to  the  cloud  has  many  benefits,  but  significant  additional 
vulnerabilities  arise  as  a  result.  To  protect  community  and  user  information, 
extensive  time  and  thought  must  take  place  to  deal  with  privacy  and  security 
issues.230  The  trusted  organization  must  also  ensure  that  the  laaS  service 
provider  provides  detailed  delineation  of  security  boundaries.  Applications  are 
developed  and  tested  prior  to  migrating  integration  applications  to  the  repository. 

2.  Trusted  Organization  Limitations 

The  trusted  organization  is  not  responsible  for  security  of  the  information 
that  resides  on  the  integrated  solution  provider’s  sites.  Many  DR  organizations 
already  use  cloud  based  storage  and  collaboration  tools.  As  such,  the  trusted 
organization  is  only  responsible  for  the  data  resident  within  each  private 
community  within  the  limitations  of  the  SA  and  detailed  design  document.  The 
trusted  organization  is  never  responsible  for  verification  of  user  identities.  Prior  to 
the  creation  of  the  private  community  interface,  proposed  community  owners 
would  need  to  have  identity  verification  measures  in  place.  Most  governments 
and  organizations  have  procedures  to  properly  vet  identities  for  their  employees. 
The  governments  and  organizations  would  dictate  authorized  users  within  their 

230.  Jansen  Wayne  and  Timothy  Grance,  Guidelines  on  Security  and  Privacy  in  Public  Cloud 
Computing,  National  Institute  of  Standards  and  Technology  Special  Publication  (NIST  SP800- 
144)  (Gaithersburg,  MD,  December  2011). 
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organization.  The  private  community  owner  is  responsible  for  vetting  users  and 
account  management  after  the  interface  comes  online.  Private  community 
owners  negotiate  with  the  trusted  organization  to  identify  what  constitutes 
acceptable  use  for  interface  users. 

The  trusted  organization  cannot  control  individual  user  machines  on  an 
organization’s  corporate  network,  nor  can  they  control  a  DR  team’s  ICT 
implementation.  Security,  from  the  end  user  to  the  interface,  represents  the 
largest  vulnerability  to  this  concept  model. 

3.  Final  Notes  for  Private  Community  and  Interface  Security 

The  trusted  organization  must  take  a  proactive  approach  to  ensure  the 
confidentiality  and  integrity  of  system  data.  To  prevent  potential  future  attacks, 
the  organization  must  monitor  for  malicious  activity,  from  the  laaS  to  the  interface 
user,  in  order  to  identify  and  take  corrective  actions.  They  must  clearly  delineate 
between  non-partner  private  communities  to  prevent  unauthorized  disclosure  or 
access  to  customer  information.  To  remain  trusted,  the  organization  must  secure 
the  data  but  remain  open  and  transparent  to  private  community  subscribers. 
Allowing  designated  private  community  administrators  access  to  a  security 
dashboard  may  establish  some  level  of  transparency  and  trust.  The  trusted 
organization  must  ensure  that  security  controls  are  in  place  to  protect  and 
prevent  unauthorized  access  to  private  community  interfaces. 

The  concepts  in  this  thesis  only  discuss  a  few  fundamental  security 
measures  but  have  left  many  others  for  future  work.  As  such,  the  concepts 
should  be  fully  developed  based  on  a  Systems  Thinking  perspective.  Further 
research  and  development  of  the  concepts  discussed  will  enable  the  creation  of 
a  comprehensive  security  solution  that  fits  within  the  DR  system. 


95 


THIS  PAGE  INTENTIONALLY  LEFT  BLANK 


96 


VI.  CONCLUSION 


Natural  disasters  can  affect  all  inhabitants  of  this  planet.  As  such, 
stakeholders  should  work  together  to  provide  effective  international  disaster  relief 
(DR)  capabilities  that  reduce  the  duration  of  relief  mission  support  and  increase 
victim  survival  rates. 

International  DR  efforts  represent  a  socially  complex  wicked  problem. 
Because  of  DR’s  wicked  nature,  previous  solutions  developed  to  resolve  issues 
fail  to  achieve  their  intended  impact.  Previous  solutions  have  addressed  aspects 
of  communication,  coordination,  cooperation,  and  collaboration  (4C)  capability. 
However,  they  have  only  addressed  symptoms  of  the  system-level  problem.  As 
such,  the  solutions  resulted  in  information  overload,  information  disparity, 
bandwidth  saturation,  and  a  disjointed  response  effort.  To  develop  a  solution  that 
would  succeed,  planners  must  better  understand  the  DR  system  and  its  related 
components. 

The  Systems  Thinking  process  represents  a  model  where  planners  can 
attain  a  better  understanding  of  the  DR  system  and  its  interdependencies.  In  its 
current  state,  the  DR  system  is  destined  to  remain  in  an  uncompromising  vicious 
cycle.  Using  the  Systems  Thinking  process,  the  variables  that  affect  the  system 
are  as  follows:  scope  of  the  disaster,  number  of  DR  mission  teams,  social 
complexity,  anarchy,  response  quality,  and  stress. 

The  variables  anarchy  and  social  complexity  negatively  impact  the 
system.  Because  of  its  impact  significance,  anarchy  is  the  dominant  system-level 
problem  variable.  Reducing  system-level  anarchy  will  significantly  improve 
response  quality,  reduce  overall  stress,  and  potentially  reduce  the  scope  of  the 
disaster. 

Previous  solutions  for  DR  4C  increased  capability,  provided  organization, 
and  enabled  collaboration.  Because  these  solutions  addressed  symptoms  of  the 
problem,  it  is  possible,  that  combining  these  solutions  could  lead  to  the 
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development  of  a  valid  system-level  solution.  Based  on  the  Systems  Thinking 
process  findings,  the  injection  point  is  the  number  of  DR  mission  teams;  and  the 
4C  variables  form  the  balancing  loop.  To  truly  reduce  system-level  anarchy,  all 
four  variables  of  the  balancing  loop  must  function  synergistically.  An 
internationally  accepted  communication  strategy  designed  to  support  open  and 
transparent  4C  provides  a  means  to  reduce  information  anarchy.  Reducing 
information  anarchy  can  potentially  reduce  the  impact  significance  of  DR  system- 
level  anarchy. 

The  communication  strategy  concept  proposed  involves  creating  a  trusted 
organization  to  manage  cloud  based  private  community  interfaces,  support  the 
BYO  ICT  concept,  and  provide  integration  support  for  existing  4C  solutions. 
Establishing  a  trusted  organization  to  manage  the  interface  could  reduce 
existing  DR  based  biases  and  creates  a  neutral  entity  for  partner-to-partner 
negotiations.  Establishing  a  completely  neutral  entity  is  not  likely;  however,  a  new 
organization’s  lack  of  an  existing  DR  history  or  reputation  may  be  sufficient  to 
obtain  international  acceptance. 

Due  to  the  vast  number  of  stakeholders,  there  is  no  way  to  dictate  an  ideal 
ICT  solution  for  DR  mission  teams.  Instead,  the  communication  strategy  supports 
the  bring-your-own  (BYO)  ICT  concept  and  provides  some  potential  solution 
model  examples  based  on  the  metrics  of  deployment,  cost,  and  security.  The 
three  solutions  are  ICT  Mobile,  ICT  Lite,  and  ICT  Standard. 

ICT  Mobile  is  highly  deployable  and  inexpensive  but  requires  coordination 
with  vendors  to  develop  acceptable  encryption  for  data-in-transit.  ICT  Mobile  is 
designed  for  single  person  use  or  as  designated  as  a  contingency 
communications  solution. 

ICT  Lite  is  highly  deployable,  significantly  more  expensive,  and  generally 
comes  with  features  to  secure  data-in-transit.  DR  mission  teams  should  ensure 
that  their  ICT  Lite  system  does  not  rely  on  obsolete  encryption  standards.  ICT 
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Lite  provides  service  for  up  to  eleven  personnel  using  a  minimum  of  one  Wi-Fi 
access  point. 

ICT  Standard  is  deployable,  very  expensive,  and  can  come  with  additional 
security  appliances.  ICT  Standard  provides  the  most  flexibility,  but  package  cost 
is  relative  to  desired  service  plan  and  organizational  requirements. 

The  second  part  of  the  strategy  proposes  implementation  of  a  cloud-based 
model  that  supports  application  development.  The  trusted  organization  provides 
integration  application  programming  and  community  interface  development  in  a 
PaaS  service  and  hybrid  deployment  model.  The  DR  stakeholders  obtain  access 
to  the  offered  interface  from  the  trusted  organization  using  SaaS  service  and 
hybrid  deployment  model.  The  model  allows  the  organization  to  focus  on 
providing  quality  IT  and  integration  services,  while  the  DR  stakeholders  can 
develop  operational  content  and  service  level  agreements  (SLAs)  with  desired 
partners.  This  model  also  supports  and  encourages  the  creation  of  disaster 
response  plans  (DRPs),  collaboration  with  partners  to  create  contingency 
disaster  response  plans  (CDRPs),  and  establishing  frequency  management 
plans  for  communities  and  selected  partners. 

When  DR  teams  initially  deploy  to  the  disaster  area,  their  primary 
objective  is  to  coordinate  with  local  government  to  determine  where  help  is 
required.  This  officially  identifies  local  government  as  C2  for  the  relief  effort. 
Unfortunately,  this  does  not  always  occur.  The  second  part  of  the  strategy 
supports  identifying  local  government  as  the  primary  communications  coordinator 
and  C2  through  the  creation  of  private  community  interfaces  for  each  country, 
government,  and  organization.  For  teams  to  participate  in  DR  within  the  affected 
country,  they  must  obtain  approval  from  local  government  and  agree  to  use  the 
local  government’s  interface  tools.  Private  community  interfaces  allow  the  local 
government,  or  its  designated  C2  contingency,  to  guide  DR  operations  from  start 
to  finish.  The  private  community  and  C2  concept  add  structure,  organization,  and 
reduce  both  information  and  general  anarchy  with  the  DR  system.  Since 

participating  teams  must  use  the  designated  DR  tools,  standing  DRPs,  CDRPs, 
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and  frequency  management  plans  of  the  respective  private  community  interface, 
the  impact  of  information  fragmentation  is  negligible. 

The  third  part  of  the  strategy  involves  creating  a  mobile  application 
interface.  The  principle  behind  the  mobile  application  is  to  provide  similar 
capabilities  to  mobile  users  using  bandwidth-restricted  devices.  The  mobile 
interface  proposes  creating  an  application  that  would  allow  information  to  be  sent 
and  received  while  requiring  minimal  bandwidth.  The  mobile  application  requires 
locally  resident  device  maps.  The  only  traffic  sent  or  received  is  a  unique 
identification  code,  location  information,  and  a  text  message  of  up  to  160 
characters.  This  limitation  will  allow  use  of  existing  GPS  device  functionality  while 
facilitating  participation  in  the  DR  event  using  the  local  government’s  private 
community  interface  in  near  real  time.  The  use  of  GPS  for  communications  also 
negates  some  of  the  bandwidth  saturation  issues  experienced  during  DR 
missions. 

The  final  part  of  this  strategy  discussed  the  security  considerations.  The 
author  has  no  control  over  what  ICT  solution  or  end  devices  each  DR  team  or 
organization  uses.  Without  an  understanding  of  what  is  on  the  network,  it  is 
impossible  to  develop  a  sound  security  plan.  Instead  of  proposing  a  security  plan, 
this  strategy  briefly  discusses  the  security  concerns  of  the  design  and  prototypes 
explained.  The  design-specific  concerns  cover  identity  verification,  account 
management,  encryption  of  data  for  the  community  interface,  encryption 
standards  used  for  ICTs,  and  private  community  roles  and  responsibilities. 

This  thesis  examined  disaster  relief  AARs,  assessed  DR  as  a  system, 
discovered  a  system-level  injection  point,  developed  a  strategy  that  considered 
all  components  of  the  system,  and  introduced  strategy  concepts  that  could  result 
in  significantly  improving  the  current  DR  system. 

A.  LIMITATIONS  AND  IMPLICATIONS 

The  concepts  discussed  in  Chapter  IV  and  V  address  key  features  for 
consideration  when  developing  an  international  communications  strategy  for  DR. 
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It  does  not  constitute  a  full  solution  for  the  problem  within  the  DR  system. 
Disregarding  the  concepts  discussed  in  Chapter  IV  and  V  may  result  in  failure  of 
all  subsequent  solutions  to  address  the  DR  system-level  problem.  Further 
research  and  development  is  required  to  ensure  that  the  strategy  obtains 
international  acceptance  and  successfully  reduces  system-level  anarchy  without 
significant  social  implications.  In  addition,  further  deliberation  and  development  of 
these  concepts  should  warrant  international  DR  stakeholder  participation. 

B.  TOPICS  FOR  FURTHER  RESEARCH 

From  the  author’s  point  of  view,  the  proposed  communication  strategy 
represents  a  realistic  model  using  existing  technology.  Possible  future  works 
include  the  following  areas  of  research. 

Hastily  Formed  Networks  need  to  incorporate  a  layered  approach  to 
security.  This  approach  should  introduce  mechanisms  that  account  for  all  layers 
of  the  OSI  or  TCPIP  models.  Upgrading  hardware  that  currently  relies  on 
obsolete  encryption  standards,  incorporating  wireless  intrusion  detection  (WIDS), 
wireless  intrusion  prevention  (WIPS),  network  security  policies,  and  acceptable 
use  policies  are  all  requisites  sound  security  posture.  Researchers  should  ensure 
that  all  solutions  developed  are  derived  using  a  systems  perspective.  Doing  this 
ensures  that  security  features  implemented  do  not  impair  the  NPS  HFN  team’s 
ability  to  participate  in  international  AO. 

Another  topic  for  further  research  is  creating  the  detailed  design  document 
for  the  private  community  interface  concept  that  would  result  in  the  use  of  cutting- 
edge  technology.  Although  this  thesis  touches  on  some  of  the  major  issues  with 
DR  4C,  it  does  not  provide  a  full  solution  to  the  problems  within  the  DR  system. 

The  creation  of  a  third-party  trusted  organization  constitutes  another  area 
requiring  further  research.  Applicable  areas  of  interest  are  organization  or 
business  type,  future  cloud  models,  organization  diversity,  and  alternate  sources 
for  funding  (social  innovation  funds).  Any  solution  proposed  should  lean  heavily 
on  understanding  the  social  implications  of  the  DR  system. 

101 


Development  of  a  model  that  supports  two-way  communications  with  a 
single  integration  interface  is  another  topic  for  further  research.  Some  of  the  valid 
areas  of  research  are  as  follows:  integration  applications  repository,  development 
of  mobile  applications  for  GPS  devices,  development  of  APIs  for  existing  4C 
vendors,  and  common  operational  picture  data  normalization. 
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APPENDIX  A 


Appendix  A  provides  detailed  steps  for  the  Systems  Thinking  process.  The 
Systems  Thinking  process  reviewed  in  Chapter  III,  only  introduces  key  products 
of  the  process.  All  steps  and  work  done  to  assess  the  DR  system  are  included  in 
this  Appendix. 

A.  SYSTEMS  THINKING  PROCESS  DRAFT  PRODUCTS 

Initial  Narrative:  The  anarchy  created  in  the  aftermath  of  a  natural  disaster 
is  uncompromising.  The  lack  of  international  legislation  and  designated  C2,  result 
in  increasing  the  level  of  anarchy  associated  with  disaster  relief  (DR).23'i 

DR  mission  teams  deploy  to  provide  the  assistance  and  resources  for 
disaster  relief  to  the  local  first  responders,  governments,  and  victims.232  When  a 
disaster  occurs,  there  is  extensive  damage  to  the  infrastructure  of  cities,  homes, 
and  the  environment.  Many  times  the  debris  and  damage  to  infrastructure  and 
roads  make  it  difficult  for  responders  to  move  to  locations  for  4C  participation. 
Social  complexity  and  anarchy  also  play  a  major  role  in  forming  barriers  to 
effective  4C. 

As  DR  mission  teams  arrive,  the  social  complexity  of  the  relief  effort 
increases,  reducing  the  desire  and  capability  for  teams  to  participate  effectively  in 
4C  activities.  This  lack  of  effective  communication  creates  a  sense  of  chaos,  in 
which  these  teams  attempt  to  correct  through  assuming  command  of  the  relief 
effort  in  their  areas.233  The  individual  efforts  of  the  teams  and  assumption  of 


231.  Larry  Wentz,  “Haiti  Information  and  Communications  Observations:  Trip  report  for  Visit 
18  February  to  1  March  2010,”  Center  for  Technology  and  National  Security  (National  Defense 
University,  Washington,  DC,  08  August  2010). 

232.  Brian  Steckler,  Hastily  Formed  Networks  in  Haiti,  “Haiti  Earthquake  After  Action  Report 
and  Lessons  Learned  (AAR/LL)”  (Naval  Postgraduate  School,  Monterey,  CA.,  8  September 
2010). 

233.  Larry  Wentz,  “Haiti  Information  and  Communications  Observations:  Trip  report  for  Visit 
18  February  to  1  March  2010,”  Center  for  Technology  and  National  Security  (National  Defense 
University,  Washington,  DC,  08  August  2010). 
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command,  limits  the  scope  of  the  individual  team’s  response  and  decreases  the 
need  for  4C  between  the  participating  teams.  This,  in  turn,  leaves  areas  that 
need  support  without  aid  for  a  longer  period,  resulting  in  preventable  victim 
injuries,  deaths,  and  destruction. 


Table  6.  Identification,  Consolidation  and  Elimination  Steps. 


Identification 

Consolidation 

Elimination 

Disaster/Catastrophe 

Catastrophe  Scope 
of  the  Disaster 

Scope  of  the  Disaster 

Response 

Response 

Capability  Number 
of  HA^©R  Teams 

Number  of  DR  mission  teams 

Communication 

Communication 

Response  Quality 

Coordination 

Coordination 

Anarchy 

Collaboration 

Collaboration 

Social  Complexity 

Information  Anarchy 

Information  Anarchy 

Stress 

Capability 

Capability 

Shortfalls 

Shortfalls 

Social  Complexity 

Social  Complexity 

Security 

Security 

Stability 

Stability 

Victim  Survivability 

Victim  Survivability 

Damage 

Damage 

Relief/Aid  provided 

Relief/Aid  provided 

Response  Quality 

Response  Quality 

Stress 

Stress 
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Table  7.  The  Redefined  Variables  for  Disaster  Relief. 


Variables 

Redefining  Variables 

Scope  of  the 
Disaster 

The  degree  of  damage  and  level  of  impact  that  the  physical  and 
emotional  damage  have  on  the  victims  of  the  disaster.  The 
actions  of  all  stakeholders  and  victims  affect  the  speed  and 
efficiency  of  recovery  operations. 

Number  of  DR 
Mission  Teams 

Contingent  upon  severity  of  incident.  The  number  of  DR  mission 
teams  and  capability  required,  in  order  to,  facilitate  an  efficient 
and  effective  relief. 

Response 

Quality 

The  overall  quality  of  service  provided  by  the  mission  teams 
combined. 

Anarchy 

Ultimate  state  of  disorder,  uncertainty,  instability,  insecurity,  and 
identification  of  leadership. 

Social 

Complexity 

Humans  tend  to  react  in  a  certain  manner  based  on  their 
individual  experiences,  beliefs,  morals,  and  values.  These 
reactions  are  also  based  upon  the  norms,  values,  and  belief 
systems  of  their  country,  state,  city,  and  origin. 

Stress 

Level  of  stress  associated  with  DR.  This  includes  all 
stakeholders. 

HA/DR  response  timeline 


I  Disaster  occurs 
Local  Population 
Devastated 
Available  Local 
rescue  services 
respond. 

Search  and  rescue 
begins. 


I  n  It  la  l/te  m  porary 
communications 
netvi/orks  in  place  by 
day  5. 

Basic  necessities  are 
on  site.  Distribution 
to  most  areas 
remain  a  problem. 

Air  and  water  based 
search  and  rescue 
improves  to  remote 
areas. 


Networking 
capability  extended. 

Some  collaboration 
occurs. 

Maneuverabiiity  is 
:  still  impaired. 

Search  and  rescue 
,  efforts  are 
increased. 


Rotation  of  teams 

Bandwidth  Limited 
and  Constrained. 
Heavy  equipment 
support  arrives. 

Collaboration 
capability  improves 
but  significantly 
distributed 


.  Maneuverability 
increases  Efforts 
consolidated. 

Remote  areas  begin 
to  receive  aid  and 
supplies. 

Social  Complexity 
and  Anarchy  reduces 
but  remain  high 

Quality  of  service 
Improves. 


V 


Figure  27.  Timeline  for  Disaster  Relief  Missions. 
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Magnitude 


HA/DR  Behavior  Over  Time  Chart 


^^Number  of  HA/DR  Teams 
OAnarchy 
mhSocial  Complexity 
—•Scope  of  the  Disaster 
•^Response  Quality 
<IhStress 

Magnitude:  Relative  size  of 
and  significance  of  variable. 
Days;  From  disaster  to  30 
days  post  disaster. 


Figure  28.  Disaster  Relief  Variable  Relationship  Over  Time. 


Disaster  Occurs 
(Starting  point) 


Scope  of  the 
Disaster 


Number  of  DR 
Mission  Teams 


DR  Reinforcing  Loop 


Social 

Complexity 


Response 

Anarchy  | 

Quality 

S-  Same  =lncrease  or  decrease  in  one  variable  causes  the  same 
reaction  with  its  neighbor. 

O-  Opposite  =  Increase  or  decrease  in  one  variable  induces  an  opposite 
reaction  with  its  neighbor. 


Figure  29.  The  Initial  Causal  Loop  Diagram. 
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Table  8.  The  Balancing  Loop  Variables  for  Disaster  Relief. 


Balancing 

Variables 

Definitions 

Communications 

The  communications  variable  encompasses  all  forms  of 
communication.  This  includes  verbal,  written,  signaled,  and 
electronic  communication  methods. 

Coordination 

The  coordination  variable  encompasses,  organizing  efforts 
between  disparate  groups,  in  preparation  for  participation  in 
an  activity.  Coordination  works  to  prevent  individual  or  group 
actions  from  interfering  with  the  actions  of  other  individuals 
and  groups. 

Cooperation 

Cooperation  encompasses  coordination  on  a  larger  scale 
and  occurs  when  organizations  work  together  for  a  common 
beneficial  outcome. 

Collaboration 

Collaboration  encompasses  the  act  of  organizations  working 
together  and  sharing  information  in  order  to  generate  a 
product  or  system.  The  product  or  system  modifies, 
improves,  or  changes  an  existing  system  or  process. 
Collaboration  can  also  facilitate  the  creation  of  a  new 
system. 

S-  Same  =lncrease  or  decrease  in  one  variable  causes  the  same 
reaction  with  Its  neighbor. 

O-  Opposite  >  Increase  or  decrease  in  one  variable  induces  an  opposite 
reaction  with  Its  neighbor. 

Figure  30.  Final  Disaster  Relief  Causal  Loop  Diagram. 
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APPENDIX  B 


Appendix  B  contains  the  Rapid  Technology  Assessment  Team  executive 
summary.  It  provides  an  overview  of  the  specifics  related  to  RTAT. 


Rapid  Technology  Assessment  Teams  (RTAT) 

Executive  Summary 
25  October  2012 

Overview 

Information  and  communication  technology  (ICT)  and  power  sectors  are  critical 
to  the  response  after  major  disasters.  Currently  existing,  post  disaster 
assessments  focus  on  areas  other  than  ICT,  power  and  Information  Sharing.  A 
rapid  assessment  of  the  ICT  status  will  enable  the  host  nation  and  the 
International  humanitarian  community  to  provide  a  targeted  allocation  of 
resources  and  result  in  a  reduction  of  gaps  and  duplication  of  effort.  The  Rapid 
Technology  Assessment  Teams  (RTAT)  concept  seeks  to  provide  a  pool  of 
multidisciplinary  experts  who  will  rapidly  deploy  to  the  disaster  zone  to  provide 
this  information.  The  RTAT  concept  is  supported  by  many  organizations  and 
individuals  within  the  ICT  disaster  response  community  and  is  in  the  process  of 
obtaining  further  funding.  A  crucial  part  of  the  development  of  the  initiative  is  to 
gather  support  for  the  adoption  of  the  concept  by  key  disaster  prone  countries. 
Their  involvement  will  enable  RTAT  to  tailor  responses  based  on  specific  country 
needs  and  to  ensure  that  processes  and  operations  will  be  as  effective  as 
possible. 

The  Problem: 

The  first  hours  and  days  after  the  onset  of  major  global  disasters  are  typically 
fraught  with  chaos  and  lack  of  situational  awareness.  While  there  are  existing 
disaster  assessment  teams  from  major  organizations  that  deploy  to  such  events, 
these  teams  primarily  focus  on  sector  specialty  areas  other  than  ICT  and 
Information  Sharing.  The  ICT  sector  is  critically  important  as  it  enables  and 
supports  all  others. 

Arrival  of  the  global  response  community  usually  brings  a  welcome  and  powerful 
ICT  capacity,  but  sometimes  their  arrival  and  the  accompanying  ICT  equipment 
and  capabilities  do  not  link  effectively  with  the  host  nations  ICT  or  each  other. 
This  means  that  the  effectiveness  of  the  combined  available  resources  is  not 
maximized,  leading  to  gaps  and  duplication. 

Additionally,  sometimes  the  host  country  has  not  requested  international 
assistance  after  a  disaster.  In  this  case,  the  disasters  have  often  been  managed 
internally  with  requests  only  made  for  specific  assistance,  which  can  cause  the 
host  nation’s  resources  to  be  stretched  and  unable  to  provide  an  accurate 
assessment  of  ICT  and  power  needs.  Complete  ICT  information  is  critical  to 
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obtaining  targeted  support  that  will  enable  the  response,  business  recovery,  and 
minimize  the  effects  of  the  disaster  on  the  population. 

Specific  problems  include: 

In  the  immediate  aftermath  of  a  major  disaster,  there  is  often  a  gap  in  the 
knowledge  of  ICT  infrastructure  and  a  lack  of  communication  between  the 
International  Humanitarian  Community  (IHC)  and  the  affected  state’s  national 
infrastructure. 

What  Exists  Now: 

There  are  teams  that  currently  perform  some  very  basic  ICT  assessment 
functions.  Some  of  these  teams  are  on  standby  to  deploy  rapidly  in  12  -24  hours. 
The  United  Nations  Disaster  Assessment  and  Coordination  (UNDAC) 
international  emergency  response  system,  whose  core  mandates  are 
assessment,  coordination,  and  information  management  to  assist  the  UN  and 
governments  in  an  emergency. 

The  Emergency  Telecommunications  Cluster  (ETC) 

The  International  Federation  of  Red  Cross/Red  Crescent  (IFRC)  First 
Assessment  and  Coordination  Teams  (FACT) 

ICT  based  NGO’s  such  as  NetHope  and  TSF  have  some  assessment 
responsibilities. 

The  Requirement: 

The  proposed  solution  would  create  the  ability  to  rapidly  deploy  small,  nimble, 
multi-organizational,  multi-national  integrated  assessment  teams  of  specialists  in 
key  ICT  areas  such  as  wireless  data  communications,  voice  communications, 
radio  technologies,  power,  information  sharing,  social  networking,  etc.  The  real 
niche  this  program  represents  is  that  the  teams  can  be  made  up  of  experts  from 
a  variety  of  different  organizations  such  as  industry,  UN,  NGO,  academia. 
International  Organizations,  affected  nation  government/military,  and 
international  governments/militaries. 

Once  a  comprehensive  overview  of  the  ICT  situation  has  been  established,  a 
priority  list  of  ICT  needs  can  be  drawn  up  in  coordination  with  the  host  nation. 

The  RTAT  teams  can  also  be  requested  to  provide  specific  ICT  disaster 
assessments  in  the  event  that  full  international  assistance  has  not  been 
requested  by  the  host  nation. 

The  Teams  Will  Provide: 

Field  data  containing  both  host  nation  and  IHC  information  as  well  as 
communications  technology  and  power  needs  and  capabilities. 

-  Quality  assessment  of  this  information  by  experts  and  the  distribution  of  reliable 
and  trusted  information. 

This  Initiative  does  not  seek  to  duplicate  any  existing  process  but  to  reinforce  and 
enable  the  existing  internationally  accepted  processes  by  meeting  a  need  that  is 
recognized  but  that  is  not  currently  being  effectively  met.  By  concentrating  on 
human  interfaces  and  not  technology,  the  team  of  highly  trained  inter- 
organizational  personnel  will  identify  and  find  answers  to  specific  questions, 
compile  a  common  operations  picture  and  link  with  the  host  nation  and  the  IHC 
enabling  fast  early  recovery. 
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Specific  requirements  or  capabilities  include: 

Having  the  ability  to  quickly  deploy  (within  24  hours) 

Having  direct  links  to  local  industry  and  government 

The  ability  to  stay  in  the  disaster  zone  1-2  weeks,  then  reassess  need  to  remain 
longer  or  to  rotate  in  new  teams 

The  team  having  access  to  ICT  expertise  across  the  functional  spectrum  (ISP, 
cellular,  data  networks,  power,  etc.)  with  both  the  international  technical 
community  as  well  as  local/national  citizen  experts 

Understanding  the  need  to  work  in  close  collaboration  with  existing  teams  on  the 
ground 

Team  Makeup: 

Ideally,  these  small  teams  of  experts  would  be  composed  of  1-2  representatives 
from  each  of  the  following  organization  types:  UN,  NGOs,  International 
Government  Organizations  IGOs,  academia,  industry,  military,  and  government 
agencies  from  around  the  world.  The  formal/legal/business  organizational 
makeup  of  the  overall  program  and  teams  themselves  would  be  determined  by 
the  founding  member  organizations. 

The  leadership  of  the  teams  should  be: 

Team  Leader  (from  either  the  global  or  the  regional  technical  community) 

National  affected  state  Member  (such  as  National  Disaster  Management  Agency, 
Ministry  of  Communications  or  equivalent  affiliated  organizations) 

We  still  need  to  determine: 

Skill  sets,  qualifications,  and  exact  number  of  people  to  make  up  each  team 
Current  thinking  is  to  have  government  and/or  industry  experts  from  the  ISP 
industry,  the  GSM/other  cellular/landline  industry,  the  power  infrastructure 
industry,  the  wireless  broadband  industry,  and  the  satellite  communications 
industry. 

Teams  Readiness  Status: 

Small  teams  of  qualified/trained  experts  from  across  the  ICT  spectrum  are  on 
24X7  stand-by  to  deploy  as  soon  as  possible  but  likely  for  1-2  weeks  in  shifts. 

We  believe  that  before  deploying  to  a  specific  disaster  zone  there  should  be  a 
BASELINE  ICT/Info  Sharing  assessment  capability  in  place.  These  assessments 
should  be  accomplished  well  ahead  of  time  in  each  country  prone  to  regular 
disasters.  Such  assessments  could  be  done  by  RTAT  supporting  entities  such  as 
industry  and  academia.  The  benefits  for  such  assessments,  which  would  be 
provided  to  the  host  nation  government,  would  go  well  beyond  the  RTAT  concept 
and  be  able  to  point  out  potential  general  ICT  vulnerabilities  and  resilience  gaps 
to  all  concerned  parties. 

Team  Locations: 

RTAT  teams  would  be  stationed  at  key  locations  around  the  world,  perhaps 
modeled  after  the  UN  Disaster  Assessment  and  Coordination  Teams  program,  or 
possibly  as  associate  members  of  NetHope,  the  UN  Emergency 
Telecommunications  Cluster  (ETC  Cluster)  or  other  similar  teams.  The  host 
nation,  UN  agencies  such  as  OCHA,  WPF,  or  a  regional  entity  such  as  ASEAN 
could  call  on  these  teams. 
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Timeline  of  RTAT  Concept  Development: 

In  late  2011,  we  began  work  on  a  process  of  developing  the  concept,  identifying 
founding  member  organizations,  outlining  team  member  qualifications  forming 
the  teams,  training  and  exercising  these  teams,  and  iteratively  refining  the 
program.  We  believe  that  if  a  real-world  disaster  event  happens  any  time  in  the 
near  term  future,  and  if  the  teams  have  been  identified  and  the  roles, 
responsibilities  and  operating  procedures  are  sufficiently  advanced,  then  there 
could  be  an  opportunity  to  “jump  start”  the  entire  process  by  deploying  to  that  real 
-world  event.  Caution  of  course  would  be  needed  to  ensure  this  would  not  hinder 
but  rather  help  the  overall  response  efforts. 

Organizations  That  Have  Helped  Develop  the  RTAT  Concept: 

UN/NGO  Community: 

-  UN  (UN-OCHA) 

-  UN  (UN-World  Food  Program/  FITTEST) 

-  UN  (Emergency  Telecommunications  Cluster  (ETC)) 

-  NetHope 

-  Demining  NGO  community 

-  Telecoms  Sans  Frontieres 
-New  Zealand  Red  Cross 

-  InSTEDD 

-  CrisisMappers.Net 
Industry: 

-  Cisco  Systems 

-  Microsoft 

-  Global  VSAT  Forum 

-  Delorme 

-  Inmarsat  Government  Services,  US,  Inc. 

-  Oceus  Networks 
-MEDWEB 

Academia: 

-  Naval  Postgraduate  School  (US) 

-  University  of  Texas 

-  San  Diego  State  University 

-  National  Defense  University  (US) 

Government/Military  Community: 

-  U.S.  Department  of  Defense 

-  Pacific  Disaster  Center 
-Japan  Resiliency  Initiative 

-  International  Association  of  Emergency  Managers  (lAEM) 

Point  of  Contact: 

Brian  Steckler,  U.S.  Naval  Postgraduate  School,  Monterey  CA  USA 
Cell:  831.402.1584  -  Work:  831.656.3837  -  steckler@nps.edu 
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APPENDIX  C 


Appendix  C  contains  the  digital  messages  referenced  in  the  body  of  the 
thesis.  The  email  messages  contained  in  this  appendix  are  to  provide  validity  to 
the  claimed  quotations  in  the  body  of  the  thesis. 

RE:  A  quick  Question  about  sateiiite  bandwidth  saturation 

Lonnie  Wilson 

SentiFriday,  December  12,  2014  11:27  AM 
To:  Eric  Folsom 
Cc:  Brooks  King 


Eric, 

“The  issues  that  HA/DR  has  with  bandwidth  saturation  occurred  when  lots  of 
people  with  ICTs  moved  to  the  same  location.  I  assume  it  is  because  they  are  all 
on  the  same  frequency  band  and  the  subscribers  set  BW  does  not  allow  for  that 
much  congestion  in  the  same  area.” 

1 .  Digital  BW  (in  bps)  is  the  fundamental  limitation  for  any  Communication 
System  in  a  specific  Frequency  Band. 

2.  The  Digital  BW  is  assigned  /  utilized  by  the  users;  and  when  user 
demands  /  requirements  exceed  the  Digital  BW  capability  then  saturation 
occurs. 

“As  I  was  looking  through  some  stuff  I  found  a  neat  device  called  Delorme 
inReach  Extreme.  The  device  has  the  capability  to  send  two-way  text  messages 
and  location.  The  problem  I  am  having  issues  with  is  that  the  center  frequency 
range  is  GPS  frequencies  L-band  1100-1500  Mhz.” 

Key  question;  Does  inReach  rely  on  the  same  satellites  for  its  GPS  and 
communication  capabilities? 

No,  the  inReach  GPS  and  satellite  communications  components  rely  on  different 
sets  of  satellites.  The  GPS  component  relies  on  the  Global  Positioning  System, 
maintained  by  the  U.S.  government.  inReach  Communication  capabilities  rely  on 
the  Iridium  satellite  network. 

The  inReach  Extreme  product  uses  the  Iridium  Global  Satellite  System. 

Iridium  Communication  between  satellites  and  handsets  is  done  using 
a  TDMA  and  FDMA  based  system  using  L-band  spectrum  between  1,616  and 
1,626.5  MHz. 
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Iridium  Communication  System’s  transmissions  do  not  interfere  with  GPS  unit 
operations. 

However,  inReach  Communication  units  have  very  low  Digital  BW  capabilities. 
Certainly,  messages  are  limited  to  160  characters  per  message.  I  do  not  think 
this  Digital  BW  is  sufficient  for  this  mission. 

“The  data  it  would  send  and  receive  would  be  minimal,  however,  because  BGAN 
(the  primary  device  HA/DR  teams  use  for  connectivity)  operates  on  1 .5  -  1 .6605 
Ghz,  I  feel  like  the  GPS  frequencies  could  potentially  become  congested  due  to 
noise.” 

As  stated  above,  GPS  performance  should  not  be  degraded  with  these  units. 


"...  however,  because  BGAN  (the  primary  device  HA/DR  teams  use  for 
connectivity)  operates  on  1.5  -  1.6605  Ghz  ...” 

The  BGAN  is  a  global  satellite  Internet  network  with  telephony  using  portable 
terminals.  The  network  is  provided  by  Inmarsat  Satellite  Communication 
System  and  uses  three  geostationary  satellites  called  1-4  to  provide  almost  global 
coverage. 

From  Wikipedia,  Broadband  Global  Area  Network  for  use  on  land.  BGAN  benefits 
from  the  new  1-4  satellites  to  offer  a  shared-channel  IP  packet-switched  service 
of  up  to  492  kbits  /  second  (uplink  and  downlink  speeds  may  differ  and  depend 
on  terminal  model)  and  a  streaming-1  P  service  from  32  up  to  X-Stream  data  rate 
(services  depend  on  terminal  model).  X-Stream  delivers  the  fastest,  on  demand 
streaming  data  rates  from  a  minimum  of  384  kbits  /  second  up  to  around  450 
kbits  /  second.  Most  terminals  also  offer  circuit-switched  Mobile  ISDN  services  at 
64  kbits/s  and  even  low  speed  (4.8  kbits/s)  voice  etc.,  services.  BGAN  service  is 
available  globally  on  all  14  satellites. 

Inmarsat  Communication  does  not  interfere  with  GPS  systems. 

For  the  Inmarsat  1-4  implementation,  these  Digital  BWs  may  not  be  sufficient  for 
potentially  large  missions  that  you  might  be  considering. 


I  suggest  you  consider;  The  Inmarsat  1-5  Ka-Band  Global  Xpress  Network! 

Inmarsat  1-5  satellites  are  used  in  the  new  Inmarsat  Ka-band  Global  Xpress 
network.  This  network  delivers  high-speed  mobile  and  fixed  broadband  services 
around  the  world  at  speeds  of  up  to  50  Mbps.  This  Digital  BW  should  be 
sufficient  for  the  mission. 


Lonnie  A.  Wilson,  PhD. 
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APPENDIX  D 


Appendix  D  contains  figures  from  the  text  that  did  not  legibly  fit  within  the 
normal  dimensions  of  a  standard  figure. 

Alternate  Power  Generation  Comparison  Chart:234235 
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Compact/Light  Weight 

Maintenance  Free _ 

Flexibility _ 

Mobility _ 

Local  Reslliance _ 

indoor  Use _ 

Low  Noise _ 

All-Weather  Operation 

integration  with  Renewables 

High  Power  Output _ 

Cost _ 

Critical  Dependancy  ■  Fuel 


Not  As  Good 


Attributes 

[>efinrtion 

Compact/  Light  Weight 

System  is  small  and  easily  carried  in  large  quantities 

Maintenance  free 

System  does  not  require  additional  maintenance  processes  or  procedures  Operates  independently  without  requiring  petroleum  products 

Flexibility 

System  has  the  capability  to  support  power  for  cittical  operations  while  simultaneously  providing  charging  functions  for  other  devices. 
System  supports  power  sensitive  operational  equipment  where  down  time  can  result  in  loss  of  life  or  critical  communications 

Mobility 

System  is  commercial  airline  transpoitable  in  large  numbers. 

Local  Resilience 

System  can  draw  power  from  any  available  power  source  commonly  found  m  disaster  areas 

Indoor  Operation 

System  docs  not  require  venhiation  and  noise  level  allows  indoor  operation 

All-Weather  Operation 

System  does  not  require  specific  weather  patterns  for  continuous  effective  operation 

Integration  with  Renewables 

System  allows  the  use  of  alternate  power  sources  to  support  continuous  operation 

High  Power  Output 

System  can  output  enough  power  to  support  all  ICT  capabilities. 

Cost 

Total  Cost  of  Procurement. 

Critical  Dependancy  •  Fuel 

Requires  fuel  for  operation. 

234.  Brooks  King,  Team  Alternate  Power  Generation  Comparison,  phone  conversations,  10- 
29  January  2015. 

235.  Brian  Steckler,  Team  Alternate  Power  Generation  Comparison,  personal 
correspondence,  10-29  January  2015. 
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Disaster  Relief  Elevation  Matrix 


Disaster  Relief 
Bevation  index 


*  Note:  Entity  name  is  contingent  on  geographical  location. 


*City/Municipal 
Emergency  Services 

Down 

1 


'CountyySubregional 
Government  Down 


*City/Municipat 

Government  Down _ 

*County/Subregional 
Government  Down 
*State/Regional 
Government  Down 
’Country  Government 
Down _ 


All  Government  Down 


Disaster  Relief  Elevation 
Matrix 


’State/Regional  Emergency 
Services  Down 


’Country  Emergency  Services 
Down 


All  Emergency 
Services  Down 


MINOR 


’Municipal 


Local 


Initiate  Local  Disaster  Response 
plan  with  escalation  as  needed. 


Uvl 


Elevation  Level 


4 

EXTREME 

’Country 

Highest  Ranked  Country 
Government  Official 

Initiate  National  Response  Plan 
and  alert  International  Partn  ers. 

3 

EXTENSIVE 

’State/Regionai 

State  Level  Director 

Initiate  State  Disaster  Response 
Plan  with  escalation  as  needed. 
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APPENDIX  E 


Appendix  E  contains  presentation  slides  from  the  Middlebury  Institute  of 
International  Studies  at  Monterey  (MIIS),  Cyber  Initiative.  Brian  Steckler  gave  a 
briefing  on  Hastily  Formed  Networks  for  HA/DR,  and  the  author  followed  with  a 
presentation  and  discussion  on  the  concepts  of  this  thesis. 


Mils  Cyber  Speaker  Series 


Hastily  Formed  Networb 

For  Humanitarian  Assistance/Disaster  Relief 


Red  Cross  "Heroes”  Award  Recipient 
VoR  Work-in  Hurricane  Katrifja,  2006 


AJJrnssing  issues 
ill  emergency  response 
to  erise.y  such  as 
9/11  attacks 
Indiiin  Ocean  tsKiuimi 
Pakistan  earthcpiake  and 
Hurricane  Katrina 


Brian  Steckler 

Director,  Hastily  Formed  Networks  Research  Group 
Associate  Chair  for  Special  Programs 
U.S.  Naval  Postgraduate  School 

1 2  March  201 5, 1 2:00  pm  - 1 :50  pm 

MIIS  Campus  -  41 1  Pacific  Street 
McGowan  Building,  Room  102,  Monterey,  CA 


OPLNTOTHBPimUC.  NOTmC.ICALEXPER'-r-NCEREOU'Rro. 
httpj'/iites  n-  •;  cdu/cyber 
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A  Communication  Strategy  for 
Disaster  Relief 


Unclassified  Information  Brief  March  2015 


Prepared  by  Eric  M.  Folsom,  Student  Cyber  Systems  and  Operations 


Background 

What  do  disasters  do? 

Stakeholders? 

Problems? 

What  has  been  done  to  correct  problems 
disaster  relief? 

Why  create  another  technical  solution  for 
DR? 


Issues  Identified 


•  Cost 

•  Interoperability  issues 

•  Satellite  communications  limitations,  bandwidth 
over-utilization,  and  frequency  management. 

•  Network  security  policies  were  not  in  place 

•  Internal  trust  and  collaboration  issues  result  in 
Information  overload 

•  Lack  of  automated  reporting 

•  Lack  of  social  media  integration 


Audience  Questions 

•  Does  current  technology  allow  us  to  create 
such  a  solution? 

•  Is  a  solution  possible  considering  the 
social  implications  of  DR? 

•  How  can  we  better  understand  the 
system? 


Systems  Thinking  process 

1.  Narrative 

2.  System  level  variable  ID 

3.  Disaster  relief  (DR)  timeline 

4.  Behavior  over  time 

5.  System  causal  loop  diagram  (CLD) 

6.  System  level  problem  variable 

7.  Properly  frame  the  problem 

8.  DR  Injection  point 

9.  DR  balancing  loop  variables 

10.  Final  DR  causal  loop  diagram  (CLD) 


DR  System  Level  Variables 

•  Scope  of  the  disaster 

•  Number  of  disaster  reiief  (DR)  mission 
teams 

•  Sociai  compiexity 

•  Anarchy 

•  Response  quaiity 

•  Stress 


Magnitude 


Variable  Behavior  Over  Time 

HA/DR  Behavior  Over  Time  Chart 


^^ilumber  of  HA/OR  Teamt 
4>Anarchv 
4>Sodal  Complexity 
“Scope  of  the  Disaster 
^-*4lesponse  Quality 
4>Stress 

Magnitude:  Relative  site  of 
and  significance  of  variable. 
Days;  From  disaster  to  30 
days  post  disaster. 


Current  Disaster  Relief  System 


S«  Same  sincrease  or  decrease  in  one  variable  causes  the  same 
reaction  with  its  neighbor. 

0‘  Opposite  s  Increase  or  decrease  in  one  variable  induces  an  opposite 
reaction  with  its  neighbor. 
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Balancing  Variables 


•  Communication 

•  Coordination 

•  Cooperation 

•  Collaboration 

•  All  four  combine  to  create  the  4C  concept 


Adjusted  DR  System  Loop 


S-  Same  =lncrease  or  decrease  in  one  variable  causes  the  same 
reaction  with  its  neighbor. 

O*  Opposite  =  Increase  or  decrease  in  one  variable  induces  an  opposite 
reaction  with  its  neighbor. 
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DR  Communication  Strategy 

Concepts 

•  A  Connection  Capability 

•  A  Trusted  Organization  for  Interface  Management 

•  Cloud  Model  of  Service  and  Deployment 


A  Connection  Capability 


etc. 
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ICT  Options 


ICT  Solution  Options 


ICT  Mobile 


Omtirma  by; 
Inc  noiMi 
and  kooktKmi 
VTir* 

wpMM  iMna 


=11=  t)  *  s 


s«prwMW/Pm 

ICT  Lite 


LMad  I  aw—  [J  ^Okt«TiBn*  lap* n* 


ICT  standard-  Based  on  HFN 


.MT  UaanadMW 


*  1.  =0=  .fi 


S  *  <9 

—dM*!/  ImdbM  *0*a«TatM 


A  Trusted  Organization  For 
Interface  Management 

•  Why  a  new  trusted  organization? 

•  Why  not  use  an  existing  relief 
organization? 

•  Trusted  organization  responsibilities 


FHIUFFINE  NATIONAL  PtSASTER  RELIEF  INTERFACE 


Tutorial  and 
Help  Options 

COmnMnitv  Planning  Products  ' 

Disaster 
Recovery  Plans 

Frequency 

MtGT 

Plans 

National  SLAs 
and  MOUs 

Approved 

International 

Partners 

User  Workspace 

Response 
^  Training 

Local  Conwnunrty  Dtscussiorts- 

OnsiTeBk)^ 


Loc4l  CommunitY 
Chat 


Wictert  B*-  Ltxai  Weather  Reports,  local  News  Feeifa,  etc.  | 
I  Widg«t  I  Widget  Widget  Widget  I 


links  to  Existing  Response 
Resources 

(Awaiting  Integration) 

Gov.  Approved  Apps. 
Exanrgrles:  APAN/Jabber/ 
Dropbox/etc. 


Cloud  Model  of  Service 


125 


Private  Community  Model 


Country  Private 
Community 


Regional/State  Government 


County/Subregional  Government 


Crty/Municipal  Government 


Local 

Commercial 
Sector  DR  Orgs 


Police 


Medical 


Private  Community  Concept  Model 


External 

Partner*/ 

Organizations 


Community  Partnerships 

DR  SLA  Example:  Philippines 


XXX  Country  NGO  Community 

Community  Interface  Interface 
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Disaster  Relief  Elevation  Matrix 


DiftMtor  Relief  Elevalton 
Matrix 

'CilylMunicipal 
Government  Down 
’CountyfSubreglortal 
Government  Down 
'State/Reg  ioruU 
Government  Down 
‘Country  Government 
Down 

All  Government  Down 


Future  Research 

•  Prototype  Development 

•  Detailed  Security  Plan 

•  Alternate  Funding  Sources 


Questions 


•  Contact  Information: 

•  Eric  M.  Folsom 

•  ericfolsom1@gmail.com 
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